CVE-2025-39968
i40e: add max boundary check for VF filters
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
15 Oct 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In the Linux kernel, the following vulnerability has been resolved:
i40e: add max boundary check for VF filters
There is no check for max filters that VF can request. Add it.
Affected products
Linux · LinuxReferences
https://git.kernel.org/stable/c/02aae5fcdd34c3a55a243d80a1b328a35852a35chttps://git.kernel.org/stable/c/77a35be582dff4c80442ebcdce24d45eed8a6ce4https://git.kernel.org/stable/c/8b13df5aa877b9e4541e301a58a84c42d84d2d9ahttps://git.kernel.org/stable/c/9176e18681cb0d34c5acc87bda224f5652af2ab8https://git.kernel.org/stable/c/cb79fa7118c150c3c76a327894bb2eb878c02619https://git.kernel.org/stable/c/d33e5d6631ac4fddda235a7815babc9d3f124299https://git.kernel.org/stable/c/e490d8c5a54e0dd1ab22417d72c3a7319cf0f030https://git.kernel.org/stable/c/edecce7abd7152b48e279b4fa0a883d1839bb577