CVE-2025-38200

i40e: fix MMIO write access to an invalid page in i40e_clear_hw

State: Published
Severity: Not scored
Published: Jul 4, 2025
Updated: Jun 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

i40e: fix MMIO write access to an invalid page in i40e_clear_hw

When the device sends a specific input, an integer underflow can occur, leading to MMIO write access to an invalid page.

Prevent the integer underflow by changing the type of related variables.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1bff652941c4d94f97610c9a30473aad6f5b2fff to before 872607632c658d3739e4e7889e4f3c419ae2c193Affected 1bff652941c4d94f97610c9a30473aad6f5b2fff to before 5e75c9082987479e647c75ec8fdf18fa68263c42Affected 1bff652941c4d94f97610c9a30473aad6f5b2fff to before fecb2fc3fc10c95724407cc45ea35af4a65cdde2Affected 1bff652941c4d94f97610c9a30473aad6f5b2fff to before d88a1e8f024ba26e19350958fecbf771a9960352Affected 1bff652941c4d94f97610c9a30473aad6f5b2fff to before 8cde755f56163281ec2c46b4ae8b61f532758a6fAffected 1bff652941c4d94f97610c9a30473aad6f5b2fff to before 3502dd42f178dae9d54696013386bb52b4f2e655Affected 1bff652941c4d94f97610c9a30473aad6f5b2fff to before 2a1f4f2e36442a9bdf771acf6ee86f3cf876e5caAffected 1bff652941c4d94f97610c9a30473aad6f5b2fff to before 015bac5daca978448f2671478c553ce1f300c21eAffected
LinuxLinux	3.12Affected before 3.12Not affected 5.4.295 through 5.4.Not affected 5.10.239 through 5.10.Not affected 5.15.186 through 5.15.Not affected 6.1.142 through 6.1.Not affected 6.6.95 through 6.6.Not affected 6.12.35 through 6.12.Not affected 6.15.4 through 6.15.*Not affected 6.16 and laterNot affected

Product

Versions

LinuxLinux

1bff652941c4d94f97610c9a30473aad6f5b2fff to before 872607632c658d3739e4e7889e4f3c419ae2c193Affected
1bff652941c4d94f97610c9a30473aad6f5b2fff to before 5e75c9082987479e647c75ec8fdf18fa68263c42Affected
1bff652941c4d94f97610c9a30473aad6f5b2fff to before fecb2fc3fc10c95724407cc45ea35af4a65cdde2Affected
1bff652941c4d94f97610c9a30473aad6f5b2fff to before d88a1e8f024ba26e19350958fecbf771a9960352Affected
1bff652941c4d94f97610c9a30473aad6f5b2fff to before 8cde755f56163281ec2c46b4ae8b61f532758a6fAffected
1bff652941c4d94f97610c9a30473aad6f5b2fff to before 3502dd42f178dae9d54696013386bb52b4f2e655Affected
1bff652941c4d94f97610c9a30473aad6f5b2fff to before 2a1f4f2e36442a9bdf771acf6ee86f3cf876e5caAffected
1bff652941c4d94f97610c9a30473aad6f5b2fff to before 015bac5daca978448f2671478c553ce1f300c21eAffected

LinuxLinux

3.12Affected
before 3.12Not affected
5.4.295 through 5.4.*Not affected
5.10.239 through 5.10.*Not affected
5.15.186 through 5.15.*Not affected
6.1.142 through 6.1.*Not affected
6.6.95 through 6.6.*Not affected
6.12.35 through 6.12.*Not affected
6.15.4 through 6.15.*Not affected
6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.