CVE-2025-39970

Linux Kernel 4.17.0-6.16.9 - Out-of-Bounds Dereference in i40e Action Meta Validation

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: i40e: fix input validation logic for action_meta Fix condition to check 'greater or equal' to prevent OOB dereference.

References (8)

Core 8

Scores

EPSS 0.0020
EPSS Percentile 9.7%

Details

Status published
Products (25)
linux/Kernel 4.17.0 - 5.4.300linux
linux/Kernel 5.11.0 - 5.15.194linux
linux/Kernel 5.16.0 - 6.1.155linux
linux/Kernel 5.5.0 - 5.10.245linux
linux/Kernel 6.13.0 - 6.16.10linux
linux/Kernel 6.2.0 - 6.6.109linux
linux/Kernel 6.7.0 - 6.12.50linux
Linux/Linux < 4.17
Linux/Linux 4.17
Linux/Linux 5.10.245 - 5.10.*
... and 15 more
Published Oct 15, 2025
Tracked Since Feb 18, 2026