CVE-2025-39971: i40e: fix idx validation in config queues msg
i40e: fix idx validation in config queues msg
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Apply the upstream Linux kernel fix for i40e: fix idx validation in i40e_vc_config_queues_msg() to ensure idx is within range of active/initialized TCs when iterating over vf->ch[idx] in config queues msg.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39971?
CVE-2025-39971 is categorized as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2025-39971?
To mitigate CVE-2025-39971, update to the latest version of the Linux kernel that addresses this vulnerability.
Which versions of the Linux kernel are affected by CVE-2025-39971?
CVE-2025-39971 affects certain versions of the Linux kernel where the vulnerability was present prior to the fix.
What type of vulnerability is CVE-2025-39971?
CVE-2025-39971 is a validation vulnerability that affects the i40e driver in the Linux kernel.
What are the potential impacts of CVE-2025-39971?
Exploitation of CVE-2025-39971 could lead to unexpected behavior in the configuration of virtual functions in the i40e driver.