CVE-2025-39922: ixgbe: fix incorrect map used in eee linkmode
In the Linux kernel, the following vulnerability has been resolved:
ixgbe: fix incorrect map used in eee linkmode
incorrectly used ixgbelpmap in loops intended to populate the supported and advertised EEE linkmode bitmaps based on ixgbelsmap. This results in incorrect bit setting and potential out-of-bounds access, since ixgbelpmap and ixgbelsmap have different sizes and purposes.
ixgbelpmap[i] -> ixgbelsmap[i]
Use ixgbelsmap for supported and advertised linkmodes, and keep ixgbelpmap usage only for link partner (lpadvertised) mapping.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39922?
CVE-2025-39922 has a severity rating of moderate due to its potential to affect network communication settings in Linux systems.
How do I fix CVE-2025-39922?
To fix CVE-2025-39922, upgrade to the latest version of the Linux kernel where this vulnerability has been patched.
What systems are affected by CVE-2025-39922?
CVE-2025-39922 affects various versions of the Linux kernel, particularly those utilizing ixgbe for Ethernet drivers.
What type of vulnerability is CVE-2025-39922?
CVE-2025-39922 is a bug related to incorrect bitmap mappings in EEE linkmode settings for the ixgbe driver.
Is there a workaround for CVE-2025-39922?
There is no specific workaround for CVE-2025-39922 other than applying the appropriate kernel update to resolve the vulnerability.