PT-2025-42246
CVE-2025-39971
·
Published
2025-09-18
·
Updated
2026-10-21
Description by
CVSS 3.1
8.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel related to index validation within configuration queues messaging in the i40e driver. Specifically, the issue occurs when iterating over
vf->ch[idx] in the i40e vc config queues msg() function, failing to ensure that the index (idx) is within the range of active and initialized traffic classes (TCs).Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾