CVE-2025-39972

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s i40e network driver related to index validation within the i40e validate queue map() function. Specifically, the issue occurs when iterating over vf->ch[idx], where the index idx is not properly validated to ensure it falls within the range of active or initialized traffic control (TC) queues. This could potentially lead to issues during queue map validation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.