CVE-2025-39969: i40e: fix validation of VF state in get resources

Description

In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40E_VF_STATE_ACTIVE is not the only state in which VF is actually active so it should not be used to determine if a VF is allowed to obtain resources. Use I40E_VF_STATE_RESOURCES_LOADED that is set only in i40e_vc_get_vf_resources_msg() and cleared during reset.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

171527da84149c2c7aa6a60a64b09d24f3546298 to < 185745d56ec958bf8aa773828213237dfcc32f5aaffected
eb87117c27e729b0aeef4d72ed40d6a1761b0f68 to < f47876788a23de296c42ef9d505b5c1630f0b4b8affected
2132643b956f553f5abddc9bae20dae267b082e0 to < 8e35c80f8570426fe0f0cc92b151ebd835975f22affected
61125b8be85dfbc7e9c7fe1cc6c6d631ab603516 to < 6c3981fd59ef11a75005ac9978f034da5a168b6aaffected
61125b8be85dfbc7e9c7fe1cc6c6d631ab603516 to < e748f1ee493f88e38b77363a60499f979d42c58aaffected
61125b8be85dfbc7e9c7fe1cc6c6d631ab603516 to < 6128bbc7adc25c87c2f64b5eb66a280b78ef7ab7affected
61125b8be85dfbc7e9c7fe1cc6c6d631ab603516 to < a991dc56d3e9a2c3db87d0c3f03c24f6595400f1affected
61125b8be85dfbc7e9c7fe1cc6c6d631ab603516 to < 877b7e6ffc23766448236e8732254534c518ba42affected
5.4.165 to < 5.4.300affected
5.10.85 to < 5.10.245affected
5.15.8 to < 5.15.194affected

Linux Linux

Default version status: affected

5.16affected
0 to < 5.16unaffected
5.4.300 to ≤ 5.4.*unaffected
5.10.245 to ≤ 5.10.*unaffected
5.15.194 to ≤ 5.15.*unaffected
6.1.155 to ≤ 6.1.*unaffected
6.6.109 to ≤ 6.6.*unaffected
6.12.50 to ≤ 6.12.*unaffected
6.16.10 to ≤ 6.16.*unaffected
6.17 to ≤ *unaffected

CVE-2025-39969

i40e: fix validation of VF state in get resources

Description

Affected products

Linux Linux

Linux Linux

References