Resource Management Flaw in i40e Driver for Linux Kernel

CVE-2025-39969

What is CVE-2025-39969?

A resource management flaw in the i40e driver for the Linux kernel has been identified, affecting how the virtual function (VF) state is validated when requesting resources. The current implementation considers only the I40E_VF_STATE_ACTIVE state, which does not adequately represent all conditions under which a VF is deemed active. As a result, VFs may obtain resources erroneously. The vulnerability has been addressed by ensuring that the I40E_VF_STATE_RESOURCES_LOADED state is checked, which is appropriately set during resource requests and cleared on reset.

References