Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-39970

i40e: fix input validation logic for action_meta

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: i40e: fix input validation logic for action_meta Fix condition to check 'greater or equal' to prevent OOB dereference.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e284fc280473bed23f2e1ed324e102a48f7d17e1 to < a88c1b2746eccf00e2094b187945f0f1e990b400affected
  • e284fc280473bed23f2e1ed324e102a48f7d17e1 to < 28465770ca3b694286ff9ed6dfd558413f57d98faffected
  • e284fc280473bed23f2e1ed324e102a48f7d17e1 to < f8c8e11825b24661596fa8db2f0981ba17ed0817affected
  • e284fc280473bed23f2e1ed324e102a48f7d17e1 to < 461e0917eedcd159d87f3ea846754a1e07d7e78aaffected
  • e284fc280473bed23f2e1ed324e102a48f7d17e1 to < 3883e9702b6a4945e93b16c070f338a9f5b496f9affected
  • e284fc280473bed23f2e1ed324e102a48f7d17e1 to < 3118f41d8fa57b005f53ec3db2ba5eab1d7ba12baffected
  • e284fc280473bed23f2e1ed324e102a48f7d17e1 to < 560e1683410585fbd5df847f43433c4296f0d222affected
  • e284fc280473bed23f2e1ed324e102a48f7d17e1 to < 9739d5830497812b0bdeaee356ddefbe60830b88affected

Linux Linux

Default version status: affected

  • 4.17affected
  • 0 to < 4.17unaffected
  • 5.4.300 to ≤ 5.4.*unaffected
  • 5.10.245 to ≤ 5.10.*unaffected
  • 5.15.194 to ≤ 5.15.*unaffected
  • 6.1.155 to ≤ 6.1.*unaffected
  • 6.6.109 to ≤ 6.6.*unaffected
  • 6.12.50 to ≤ 6.12.*unaffected
  • 6.16.10 to ≤ 6.16.*unaffected
  • 6.17 to ≤ *unaffected

References