CVE-2025-39968

i40e: add max boundary check for VF filters

State: Published
Severity: 7.3 High
Published: Oct 15, 2025
Updated: Oct 15, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

i40e: add max boundary check for VF filters

There is no check for max filters that VF can request. Add it.

Scores

CVSS	Score	Vector	Source
3.1	7.3 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e284fc280473bed23f2e1ed324e102a48f7d17e1 to before 9176e18681cb0d34c5acc87bda224f5652af2ab8Affected e284fc280473bed23f2e1ed324e102a48f7d17e1 to before e490d8c5a54e0dd1ab22417d72c3a7319cf0f030Affected e284fc280473bed23f2e1ed324e102a48f7d17e1 to before 77a35be582dff4c80442ebcdce24d45eed8a6ce4Affected e284fc280473bed23f2e1ed324e102a48f7d17e1 to before 02aae5fcdd34c3a55a243d80a1b328a35852a35cAffected e284fc280473bed23f2e1ed324e102a48f7d17e1 to before edecce7abd7152b48e279b4fa0a883d1839bb577Affected e284fc280473bed23f2e1ed324e102a48f7d17e1 to before d33e5d6631ac4fddda235a7815babc9d3f124299Affected e284fc280473bed23f2e1ed324e102a48f7d17e1 to before 8b13df5aa877b9e4541e301a58a84c42d84d2d9aAffected e284fc280473bed23f2e1ed324e102a48f7d17e1 to before cb79fa7118c150c3c76a327894bb2eb878c02619Affected
LinuxLinux	4.17Affected before 4.17Not affected 5.4.300 through 5.4.Not affected 5.10.245 through 5.10.Not affected 5.15.194 through 5.15.Not affected 6.1.155 through 6.1.Not affected 6.6.109 through 6.6.Not affected 6.12.50 through 6.12.Not affected 6.16.10 through 6.16.*Not affected 6.17 and laterNot affected

Product

Versions

LinuxLinux

e284fc280473bed23f2e1ed324e102a48f7d17e1 to before 9176e18681cb0d34c5acc87bda224f5652af2ab8Affected
e284fc280473bed23f2e1ed324e102a48f7d17e1 to before e490d8c5a54e0dd1ab22417d72c3a7319cf0f030Affected
e284fc280473bed23f2e1ed324e102a48f7d17e1 to before 77a35be582dff4c80442ebcdce24d45eed8a6ce4Affected
e284fc280473bed23f2e1ed324e102a48f7d17e1 to before 02aae5fcdd34c3a55a243d80a1b328a35852a35cAffected
e284fc280473bed23f2e1ed324e102a48f7d17e1 to before edecce7abd7152b48e279b4fa0a883d1839bb577Affected
e284fc280473bed23f2e1ed324e102a48f7d17e1 to before d33e5d6631ac4fddda235a7815babc9d3f124299Affected
e284fc280473bed23f2e1ed324e102a48f7d17e1 to before 8b13df5aa877b9e4541e301a58a84c42d84d2d9aAffected
e284fc280473bed23f2e1ed324e102a48f7d17e1 to before cb79fa7118c150c3c76a327894bb2eb878c02619Affected

LinuxLinux

4.17Affected
before 4.17Not affected
5.4.300 through 5.4.*Not affected
5.10.245 through 5.10.*Not affected
5.15.194 through 5.15.*Not affected
6.1.155 through 6.1.*Not affected
6.6.109 through 6.6.*Not affected
6.12.50 through 6.12.*Not affected
6.16.10 through 6.16.*Not affected
6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.