Description
In the Linux kernel, the following vulnerability has been resolved: i40e: fix MMIO write access to an invalid page in i40e_clear_hw When the device sends a specific input, an integer underflow can occur, leading to MMIO write access to an invalid page. Prevent the integer underflow by changing the type of related variables.
References (10)
Scores
CVSS v3
5.5
EPSS
0.0007
EPSS Percentile
20.3%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-191
Status
published
Products (9)
debian/debian_linux
11.0
linux/Kernel
3.12.0 - 5.4.295linux
linux/Kernel
5.11.0 - 5.15.186linux
linux/Kernel
5.16.0 - 6.1.142linux
linux/Kernel
5.5.0 - 5.10.239linux
linux/Kernel
6.13.0 - 6.15.4linux
linux/Kernel
6.2.0 - 6.6.95linux
linux/Kernel
6.7.0 - 6.12.35linux
linux/linux_kernel
3.12 - 5.4.295
Published
Jul 04, 2025
Tracked Since
Feb 18, 2026