CVE-2025-39972
i40e: fix idx validation in i40e_validate_queue_map
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
15 Oct 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In the Linux kernel, the following vulnerability has been resolved:
i40e: fix idx validation in i40e_validate_queue_map
Ensure idx is within range of active/initialized TCs when iterating over
vf->ch[idx] in i40e_validate_queue_map().
Affected products
Linux · LinuxReferences
https://git.kernel.org/stable/c/34dfac0c904829967d500c51f216916ce1452957https://git.kernel.org/stable/c/4d5e804a9e19b639b18fd13664dbad3c03c79e61https://git.kernel.org/stable/c/50a1e2f50f6c22b93b94eb8d168a1be3c05bf5cdhttps://git.kernel.org/stable/c/6f15a7b34fae75e745bdc2ec05e06ddfd0dd2f3chttps://git.kernel.org/stable/c/aa68d3c3ac8d1dcec40d52ae27e39f6d32207009https://git.kernel.org/stable/c/b6cb93a7ff208f324c7ec581d72995f80e115e0ehttps://git.kernel.org/stable/c/cc4191e8ef40d2249c1b9a8617d22ec8a976b574https://git.kernel.org/stable/c/d4e3eaaa3cb3af77836d806c89cd6ebf533a7320