cbcvebase.
CVE-2025-39970
published 2025-10-15

CVE-2025-39970: In the Linux kernel, the following vulnerability has been resolved: i40e: fix input validation logic for action_meta Fix condition to check 'greater or equal'…

PriorityP421critical9.8
EPSS
0.20%
9.7th percentile
In the Linux kernel, the following vulnerability has been resolved: i40e: fix input validation logic for action_meta Fix condition to check 'greater or equal' to prevent OOB dereference.

Affected

30 ranges· showing 25
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.158-1 (bookworm)linux 6.1.158-1 (bookworm)
debianlinux-6.1< linux 6.1.158-1 (bookworm)linux 6.1.158-1 (bookworm)
linuxlinux
linuxlinux>= e284fc280473bed23f2e1ed324e102a48f7d17e1 < a88c1b2746eccf00e2094b187945f0f1e990b400a88c1b2746eccf00e2094b187945f0f1e990b400
linuxlinux>= e284fc280473bed23f2e1ed324e102a48f7d17e1 < 28465770ca3b694286ff9ed6dfd558413f57d98f28465770ca3b694286ff9ed6dfd558413f57d98f
linuxlinux>= e284fc280473bed23f2e1ed324e102a48f7d17e1 < f8c8e11825b24661596fa8db2f0981ba17ed0817f8c8e11825b24661596fa8db2f0981ba17ed0817
linuxlinux>= e284fc280473bed23f2e1ed324e102a48f7d17e1 < 461e0917eedcd159d87f3ea846754a1e07d7e78a461e0917eedcd159d87f3ea846754a1e07d7e78a
linuxlinux>= e284fc280473bed23f2e1ed324e102a48f7d17e1 < 3883e9702b6a4945e93b16c070f338a9f5b496f93883e9702b6a4945e93b16c070f338a9f5b496f9
linuxlinux>= e284fc280473bed23f2e1ed324e102a48f7d17e1 < 3118f41d8fa57b005f53ec3db2ba5eab1d7ba12b3118f41d8fa57b005f53ec3db2ba5eab1d7ba12b
linuxlinux>= e284fc280473bed23f2e1ed324e102a48f7d17e1 < 560e1683410585fbd5df847f43433c4296f0d222560e1683410585fbd5df847f43433c4296f0d222
linuxlinux>= e284fc280473bed23f2e1ed324e102a48f7d17e1 < 9739d5830497812b0bdeaee356ddefbe60830b889739d5830497812b0bdeaee356ddefbe60830b88
linuxlinux_kernel>= 0 < 5.10.247-15.10.247-1
linuxlinux_kernel>= 0 < 6.1.158-16.1.158-1
linuxlinux_kernel>= 0 < 6.12.57-16.12.57-1
linuxlinux_kernel>= 0 < 6.16.10-16.16.10-1
linuxlinux_kernel>= 0 < 5.15.0-170.1805.15.0-170.180
linuxlinux_kernel>= 0 < 6.8.0-106.1066.8.0-106.106
linuxlinux_kernel>= 4.17.0 < 5.4.3005.4.300
linuxlinux_kernel>= 5.11.0 < 5.15.1945.15.194
linuxlinux_kernel>= 5.16.0 < 6.1.1556.1.155
linuxlinux_kernel>= 5.5.0 < 5.10.2455.10.245
linuxlinux_kernel>= 6.13.0 < 6.16.106.16.10
linuxlinux_kernel>= 6.2.0 < 6.6.1096.6.109
linuxlinux_kernel>= 6.7.0 < 6.12.506.12.50
msrcazl3_kernel_6.6.104.2-4_on_azure_linux_3.0

CVSS provenance

vendor_msrc9.8CRITICAL
osv7.8HIGH
vendor_ubuntu7.8HIGH
vendor_redhat5.2MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.