BaseFortify

Publication date: 2025-10-15

Last updated on: 2025-10-16

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in i40e_validate_queue_map Ensure idx is within range of active/initialized TCs when iterating over vf->ch[idx] in i40e_validate_queue_map().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-15

Last Modified

2025-10-16

Generated

2026-07-06

AI Q&A

2025-10-15

EPSS Evaluated

2026-07-05

NVD

CVE-2025-39972

EUVD

EUVD-2025-34600

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 5.15.160 (inc) to 5.16 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is related to the Linux kernel's i40e driver. It involves improper validation of an index (idx) in the function i40e_validate_queue_map. The fix ensures that the idx is within the range of active or initialized Traffic Classes (TCs) when accessing vf->ch[idx], preventing potential out-of-bounds access or invalid memory usage.

Impact Analysis

If exploited, this vulnerability could lead to improper memory access within the Linux kernel's network driver, potentially causing system instability, crashes, or other unpredictable behavior. However, specific impacts such as privilege escalation or data leakage are not detailed.

Hi! I’m here to help you understand CVE-2025-39972. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70