CVE-2025-39971
BaseFortify
Publication date: 2025-10-15
Last updated on: 2025-10-16
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| intel | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in the Linux kernel involves improper validation of an index (idx) in the i40e network driver. Specifically, the code did not ensure that idx was within the valid range of active or initialized traffic classes (TCs) when accessing vf->ch[idx] in the function i40e_vc_config_queues_msg(). This could lead to out-of-bounds access or other unexpected behavior.
How can this vulnerability impact me? :
The vulnerability could potentially cause instability or crashes in the Linux kernel's network driver due to invalid memory access. This might affect network functionality or system reliability on affected systems using the i40e driver.