Vulnerability in Linux Kernel Affects i40e Driver Functionality

CVE-2025-39972

What is CVE-2025-39972?

In the Linux kernel, an input validation vulnerability has been identified within the i40e driver, specifically in the i40e_validate_queue_map function. This issue occurs when the index used for iterating over virtual functions’ channels is not properly validated against the range of active or initialized traffic classes. This oversight could potentially lead to improper access and handling of data, creating a risk for exploitation in configured environments. Addressing this vulnerability is crucial to maintaining system integrity and security.

References