vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2025-39972

i40e: fix idx validation in i40e_validate_queue_map

HIGH
8.8
CVSS Score
Published: October 15, 2025 at 07:55 AM UTC
Updated: October 19, 2026 at 09:10 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH8.8
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in i40e_validate_queue_map Ensure idx is within range of active/initialized TCs when iterating over vf->ch[idx] in i40e_validate_queue_map().

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
4.17c27eac48160de72dee33d42b5a33cc7b8a2eb1f5
Vendor states this is fixed in 34dfac0c904829967d500c51f216916ce1452957 (fixed)
Vendor states this is fixed in 4d5e804a9e19b639b18fd13664dbad3c03c79e61 (fixed)
Vendor states this is fixed in 50a1e2f50f6c22b93b94eb8d168a1be3c05bf5cd (fixed)
Vendor states this is fixed in 6f15a7b34fae75e745bdc2ec05e06ddfd0dd2f3c (fixed)
Vendor states this is fixed in aa68d3c3ac8d1dcec40d52ae27e39f6d32207009 (fixed)
Vendor states this is fixed in b6cb93a7ff208f324c7ec581d72995f80e115e0e (fixed)
Vendor states this is fixed in cc4191e8ef40d2249c1b9a8617d22ec8a976b574 (fixed)
Vendor states this is fixed in d4e3eaaa3cb3af77836d806c89cd6ebf533a7320 (fixed)
Vendor states this is fixed in 4.17 (unaffected)
Vendor states this is fixed in 5.10.245 (unaffected)
Vendor states this is fixed in 5.15.194 (unaffected)
Vendor states this is fixed in 5.4.300 (unaffected)
Vendor states this is fixed in 6.1.155 (unaffected)
Vendor states this is fixed in 6.12.50 (unaffected)
Vendor states this is fixed in 6.16.10 (unaffected)
Vendor states this is fixed in 6.17 (unaffected)
Vendor states this is fixed in 6.6.109 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (8)

Source: cverecord
https://git.kernel.org/stable/c/b6cb93a7ff208f324c7ec581d72995f80e115e0e
Source: cverecord
https://git.kernel.org/stable/c/6f15a7b34fae75e745bdc2ec05e06ddfd0dd2f3c
Source: cverecord
https://git.kernel.org/stable/c/34dfac0c904829967d500c51f216916ce1452957
Source: cverecord
https://git.kernel.org/stable/c/4d5e804a9e19b639b18fd13664dbad3c03c79e61
Source: cverecord
https://git.kernel.org/stable/c/50a1e2f50f6c22b93b94eb8d168a1be3c05bf5cd
Source: cverecord
https://git.kernel.org/stable/c/cc4191e8ef40d2249c1b9a8617d22ec8a976b574
Source: cverecord
https://git.kernel.org/stable/c/d4e3eaaa3cb3af77836d806c89cd6ebf533a7320
Source: cverecord
https://git.kernel.org/stable/c/aa68d3c3ac8d1dcec40d52ae27e39f6d32207009

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

8.8HIGHLinux
Vector?

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card