CVE-2025-39970 — Off-by-one Error in Linux

CWE-193 — Off-by-one Error46 documents7 sources
Severity
7.8HIGHOSV
OSV5.5OSV3.2
No vector
EPSS
0.1%
top 82.23%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
LinuxLinux KernelDebian Linux+3 more
Timeline
PublishedOct 15
Latest updateApr 13

Description

In the Linux kernel, the following vulnerability has been resolved: i40e: fix input validation logic for action_meta Fix condition to check 'greater or equal' to prevent OOB dereference.

Affected Packages8 packages

▶Linuxlinux/linux_kernel4.17.0 — 5.4.300+6
▶Debianlinux/linux_kernel< 5.10.247-1+3
▶Ubuntulinux/linux_kernel< 5.15.0-170.180+1

🔴Vulnerability Details

22
OSV
linux-raspi vulnerabilities↗2026-04-01
▶
OSV
linux-raspi, linux-raspi-realtime vulnerabilities↗2026-04-01
▶
OSV
linux-azure-6.8 vulnerabilities↗2026-03-25
▶
OSV
linux-azure vulnerabilities↗2026-03-25
▶
OSV
linux-aws-6.8 vulnerabilities↗2026-03-23
▶

📋Vendor Advisories

23
Ubuntu
Linux kernel (Azure) vulnerabilities↗2026-04-13
▶
Ubuntu
Linux kernel (Azure FIPS) vulnerabilities↗2026-04-09
▶
Ubuntu
Linux kernel (Azure FIPS) vulnerabilities↗2026-04-09
▶
Ubuntu
Linux kernel (Raspberry Pi) vulnerabilities↗2026-04-01
▶
Ubuntu
Linux kernel (Raspberry Pi) vulnerabilities↗2026-04-01
▶
CVE-2025-39970 — Off-by-one Error in Linux | cvebase