CVE-2025-39971

Linux Kernel 4.17.0-6.16.9 - Out-of-Bounds Read in i40e_vc_config_queues_msg

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in config queues msg Ensure idx is within range of active/initialized TCs when iterating over vf->ch[idx] in i40e_vc_config_queues_msg().

References (8)

Core 8

Scores

EPSS 0.0020
EPSS Percentile 9.7%

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (25)
linux/Kernel 4.17.0 - 5.4.300linux
linux/Kernel 5.11.0 - 5.15.194linux
linux/Kernel 5.16.0 - 6.1.155linux
linux/Kernel 5.5.0 - 5.10.245linux
linux/Kernel 6.13.0 - 6.16.10linux
linux/Kernel 6.2.0 - 6.6.109linux
linux/Kernel 6.7.0 - 6.12.50linux
Linux/Linux < 4.17
Linux/Linux 4.17
Linux/Linux 5.10.245 - 5.10.*
... and 15 more
Published Oct 15, 2025
Tracked Since Feb 18, 2026