cbcvebase.
CVE-2025-39968
published 2025-10-15

CVE-2025-39968: In the Linux kernel, the following vulnerability has been resolved: i40e: add max boundary check for VF filters There is no check for max filters that VF can…

PriorityP433high7.3CVSS 3.1
AVLACLPRLUINSCCNILAH
EPSS
0.14%
3.5th percentile
In the Linux kernel, the following vulnerability has been resolved: i40e: add max boundary check for VF filters There is no check for max filters that VF can request. Add it.

Affected

30 ranges· showing 25
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.158-1 (bookworm)linux 6.1.158-1 (bookworm)
debianlinux-6.1< linux 6.1.158-1 (bookworm)linux 6.1.158-1 (bookworm)
linuxlinux
linuxlinux>= e284fc280473bed23f2e1ed324e102a48f7d17e1 < 9176e18681cb0d34c5acc87bda224f5652af2ab89176e18681cb0d34c5acc87bda224f5652af2ab8
linuxlinux>= e284fc280473bed23f2e1ed324e102a48f7d17e1 < e490d8c5a54e0dd1ab22417d72c3a7319cf0f030e490d8c5a54e0dd1ab22417d72c3a7319cf0f030
linuxlinux>= e284fc280473bed23f2e1ed324e102a48f7d17e1 < 77a35be582dff4c80442ebcdce24d45eed8a6ce477a35be582dff4c80442ebcdce24d45eed8a6ce4
linuxlinux>= e284fc280473bed23f2e1ed324e102a48f7d17e1 < 02aae5fcdd34c3a55a243d80a1b328a35852a35c02aae5fcdd34c3a55a243d80a1b328a35852a35c
linuxlinux>= e284fc280473bed23f2e1ed324e102a48f7d17e1 < edecce7abd7152b48e279b4fa0a883d1839bb577edecce7abd7152b48e279b4fa0a883d1839bb577
linuxlinux>= e284fc280473bed23f2e1ed324e102a48f7d17e1 < d33e5d6631ac4fddda235a7815babc9d3f124299d33e5d6631ac4fddda235a7815babc9d3f124299
linuxlinux>= e284fc280473bed23f2e1ed324e102a48f7d17e1 < 8b13df5aa877b9e4541e301a58a84c42d84d2d9a8b13df5aa877b9e4541e301a58a84c42d84d2d9a
linuxlinux>= e284fc280473bed23f2e1ed324e102a48f7d17e1 < cb79fa7118c150c3c76a327894bb2eb878c02619cb79fa7118c150c3c76a327894bb2eb878c02619
linuxlinux_kernel>= 0 < 5.10.247-15.10.247-1
linuxlinux_kernel>= 0 < 6.1.158-16.1.158-1
linuxlinux_kernel>= 0 < 6.12.57-16.12.57-1
linuxlinux_kernel>= 0 < 6.16.10-16.16.10-1
linuxlinux_kernel>= 0 < 5.15.0-170.1805.15.0-170.180
linuxlinux_kernel>= 0 < 6.8.0-106.1066.8.0-106.106
linuxlinux_kernel>= 4.17.0 < 5.4.3005.4.300
linuxlinux_kernel>= 5.11.0 < 5.15.1945.15.194
linuxlinux_kernel>= 5.16.0 < 6.1.1556.1.155
linuxlinux_kernel>= 5.5.0 < 5.10.2455.10.245
linuxlinux_kernel>= 6.13.0 < 6.16.106.16.10
linuxlinux_kernel>= 6.2.0 < 6.6.1096.6.109
linuxlinux_kernel>= 6.7.0 < 6.12.506.12.50
msrcazl3_kernel_6.6.104.2-4_on_azure_linux_3.0

CVSS provenance

nvdv3.17.3HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H
osv7.8HIGH
vendor_msrc9.8CRITICAL
vendor_ubuntu7.8HIGH
vendor_redhat5.3MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.