CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom
Published Oct 1, 2025
·Updated
e1000e: fix heap overflow in e1000seteeprom
Other sources
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
— NVD
Affected Software
5 affected componentsFixes available
Linux Kernel
Microsoft azl3 kernel 6.6.96.2-2
Microsoft azl3 kernel 6.6.104.2-4
IBM DS8A00( R10.0 - R10.1 )<=10.1.3.0 - 10.11.35.0
IBM DS8900F ( R9.4)<=89.40.83.0-89.44.25.0
Event History
Oct 1, 2025
CVE Published
via MITRE·07:42 AM
Rejected
via MITRE·07:42 AM
Data Sourced
via Red Hat·08:01 AM
DescriptionSeverityAffected Software
Data Sourced
via NVD·08:15 AM
Description
Oct 2, 2025
Data Sourced
via Microsoft·01:07 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·01:07 AM
Affected Software
Updated
via Microsoft·01:07 AM
DescriptionSeverity
Oct 24, 2025
Rejected
via MITRE·11:41 AM
Aug 19, 2026
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-39898?
CVE-2025-39898 is classified as a high severity vulnerability due to the potential for a heap overflow.
2
How do I fix CVE-2025-39898?
To fix CVE-2025-39898, you should apply the latest patches available for your version of the Linux kernel.
3
What does CVE-2025-39898 affect?
CVE-2025-39898 specifically affects the Linux kernel through the e1000e network driver.
4
What type of vulnerability is CVE-2025-39898?
CVE-2025-39898 is a heap overflow vulnerability that can lead to memory corruption.
5
Is CVE-2025-39898 being actively exploited?
As of the latest information, there have been no public reports of active exploitation of CVE-2025-39898.