CVE-2025-39973
High
Description
In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ring_len param The `ring_len` parameter provided by the virtual function (VF) is assigned directly to the hardware memory context (HMC) without any validation. To address this, introduce an upper boundary check for both Tx and Rx queue lengths. The maximum number of descriptors supported by the hardware is 8k-32. Additionally, enforce alignment constraints: Tx rings must be a multiple of 8, and Rx rings must be a multiple of 32.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Linux
PublishedOct 15, 2025
First seenOct 15, 2025
How to fix
Update
- Linux Linux0543d40d6513cdf1c7882811086e59a6455dfe97, 7d749e38dd2b7e8a80da2ca30c93e09de95bfcf9, 45a7527cd7da4cdcf3b06b5c0cb1cae30b5a5985, d3b0d3f8d11fa957171fbb186e53998361a88d4e, c0c83f4cd074b75cecef107bfc349be7d516c9c4, 05fe81fb9db20464fa532a3835dc8300d68a2f84, afec12adab55d10708179a64d95d650741e60fe0, 55d225670def06b01af2e7a5e0446fbe946289e8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 5c3c48ac6bf56367c4e89f6453cd2d61e50375bd ≤ v < 0543d40d6513cdf1c7882811086e59a6455dfe97, 5c3c48ac6bf56367c4e89f6453cd2d61e50375bd ≤ v < 7d749e38dd2b7e8a80da2ca30c93e09de95bfcf9, 5c3c48ac6bf56367c4e89f6453cd2d61e50375bd ≤ v < 45a7527cd7da4cdcf3b06b5c0cb1cae30b5a5985, 5c3c48ac6bf56367c4e89f6453cd2d61e50375bd ≤ v < d3b0d3f8d11fa957171fbb186e53998361a88d4e, 5c3c48ac6bf56367c4e89f6453cd2d61e50375bd ≤ v < c0c83f4cd074b75cecef107bfc349be7d516c9c4, 5c3c48ac6bf56367c4e89f6453cd2d61e50375bd ≤ v < 05fe81fb9db20464fa532a3835dc8300d68a2f84, 5c3c48ac6bf56367c4e89f6453cd2d61e50375bd ≤ v < afec12adab55d10708179a64d95d650741e60fe0, 5c3c48ac6bf56367c4e89f6453cd2d61e50375bd ≤ v < 55d225670def06b01af2e7a5e0446fbe946289e8, 3.12 | 0543d40d6513cdf1c7882811086e59a6455dfe97, 7d749e38dd2b7e8a80da2ca30c93e09de95bfcf9, 45a7527cd7da4cdcf3b06b5c0cb1cae30b5a5985, d3b0d3f8d11fa957171fbb186e53998361a88d4e, c0c83f4cd074b75cecef107bfc349be7d516c9c4, 05fe81fb9db20464fa532a3835dc8300d68a2f84, afec12adab55d10708179a64d95d650741e60fe0, 55d225670def06b01af2e7a5e0446fbe946289e8 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.