BaseFortify

Publication date: 2025-10-15

Last updated on: 2025-10-16

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: i40e: fix input validation logic for action_meta Fix condition to check 'greater or equal' to prevent OOB dereference.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-15

Last Modified

2025-10-16

Generated

2026-07-06

AI Q&A

2025-10-15

EPSS Evaluated

2026-07-05

NVD

CVE-2025-39970

EUVD

EUVD-2025-34602

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 5.15.160 (inc) to 5.16 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in the Linux kernel's i40e driver, where the input validation logic for 'action_meta' was incorrect. The fix involved correcting the condition to check 'greater or equal' to prevent an out-of-bounds (OOB) dereference, which could lead to memory access errors.

Impact Analysis

The vulnerability could cause an out-of-bounds memory dereference in the Linux kernel, potentially leading to system instability, crashes, or security issues such as memory corruption or escalation of privileges.

Hi! I’m here to help you understand CVE-2025-39970. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70