CVE-2025-39898 — Heap-based Buffer Overflow in Kernel
Severity
9.8CRITICAL
No vectorEPSS
No EPSS data
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 1
Latest updateOct 14
Description
e1000e: fix heap overflow in e1000_set_eeprom
In the Linux kernel, the following vulnerability has been resolved:
e1000e: fix heap overflow in e1000_set_eeprom
Fix a possible heap overflow in e1000_set_eeprom function by adding
input validation for the requested length of the change in the EEPROM.
In addition, change the variable type from int to size_t for better
code practices and rearrange declarations to RCT.
Affected Packages4 packages
🔴Vulnerability Details
3GHSA▶
GHSA-46jx-rccq-85v5: In the Linux kernel, the following vulnerability has been resolved:
e1000e: fix heap overflow in e1000_set_eeprom
Fix a possible heap overflow in e1↗2025-10-01
OSV▶
CVE-2025-39898: In the Linux kernel, the following vulnerability has been resolved: e1000e: fix heap overflow in e1000_set_eeprom Fix a possible heap overflow in e100↗2025-10-01