Linux Kernel Vulnerability in i40e Driver Affecting Descriptor Management

CVE-2025-39973

What is CVE-2025-39973?

A vulnerability in the i40e driver within the Linux kernel allows the ring_len parameter provided by the virtual function to be assigned directly to the hardware memory context without adequate validation. This oversight could lead to various unintended behaviors. To mitigate this issue, an upper boundary check has been introduced for both transmit (Tx) and receive (Rx) queue lengths, ensuring they do not exceed the hardware's maximum capacity of 8k-32 descriptors. Additional alignment constraints have also been enforced, necessitating that Tx rings are a multiple of 8 and Rx rings a multiple of 32, thereby enhancing the robustness and security of the driver.

References