vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2025-39968

i40e: add max boundary check for VF filters

HIGH
7.3
CVSS Score
Published: October 15, 2025 at 07:55 AM UTC
Updated: October 19, 2026 at 09:10 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.3
Exploit prediction
EPSS 0.1%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: i40e: add max boundary check for VF filters There is no check for max filters that VF can request. Add it.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
4.17e284fc280473bed23f2e1ed324e102a48f7d17e1
Vendor states this is fixed in 02aae5fcdd34c3a55a243d80a1b328a35852a35c (fixed)
Vendor states this is fixed in 77a35be582dff4c80442ebcdce24d45eed8a6ce4 (fixed)
Vendor states this is fixed in 8b13df5aa877b9e4541e301a58a84c42d84d2d9a (fixed)
Vendor states this is fixed in 9176e18681cb0d34c5acc87bda224f5652af2ab8 (fixed)
Vendor states this is fixed in cb79fa7118c150c3c76a327894bb2eb878c02619 (fixed)
Vendor states this is fixed in d33e5d6631ac4fddda235a7815babc9d3f124299 (fixed)
Vendor states this is fixed in e490d8c5a54e0dd1ab22417d72c3a7319cf0f030 (fixed)
Vendor states this is fixed in edecce7abd7152b48e279b4fa0a883d1839bb577 (fixed)
Vendor states this is fixed in 4.17 (unaffected)
Vendor states this is fixed in 5.10.245 (unaffected)
Vendor states this is fixed in 5.15.194 (unaffected)
Vendor states this is fixed in 5.4.300 (unaffected)
Vendor states this is fixed in 6.1.155 (unaffected)
Vendor states this is fixed in 6.12.50 (unaffected)
Vendor states this is fixed in 6.16.10 (unaffected)
Vendor states this is fixed in 6.17 (unaffected)
Vendor states this is fixed in 6.6.109 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (8)

Source: cverecord
https://git.kernel.org/stable/c/9176e18681cb0d34c5acc87bda224f5652af2ab8
Source: cverecord
https://git.kernel.org/stable/c/e490d8c5a54e0dd1ab22417d72c3a7319cf0f030
Source: cverecord
https://git.kernel.org/stable/c/77a35be582dff4c80442ebcdce24d45eed8a6ce4
Source: cverecord
https://git.kernel.org/stable/c/02aae5fcdd34c3a55a243d80a1b328a35852a35c
Source: cverecord
https://git.kernel.org/stable/c/edecce7abd7152b48e279b4fa0a883d1839bb577
Source: cverecord
https://git.kernel.org/stable/c/d33e5d6631ac4fddda235a7815babc9d3f124299
Source: cverecord
https://git.kernel.org/stable/c/8b13df5aa877b9e4541e301a58a84c42d84d2d9a
Source: cverecord
https://git.kernel.org/stable/c/cb79fa7118c150c3c76a327894bb2eb878c02619

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.3HIGHLinux
Vector?

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card