Heap Overflow Vulnerability in Linux Kernel's e1000e Driver

CVE-2025-39898

What is CVE-2025-39898?

A heap overflow vulnerability exists in the e1000_set_eeprom function of the Linux kernel's e1000e driver. This flaw potentially allows attackers to exploit the driver by manipulating the EEPROM's change request length, which could lead to unintended memory corruption. The vulnerability has been addressed by improving input validation and changing related variable types to enhance code reliability and security practices.

References