{"id":"CVE-2025-39968","revision":"fddb8b7391bf4aa9b182739be9c4803e","records":[{"revision":"fddb8b7391bf4aa9b182739be9c4803e","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-39968","aliases":[],"title":"i40e: add max boundary check for VF filters","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ni40e: add max boundary check for VF filters\n\nThere is no check for max filters that VF can request. Add it.","state":0,"publishedAt":"2025-10-15T07:55:52.272+00:00","modifiedAt":"2026-10-15T22:02:34.443+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"e284fc280473bed23f2e1ed324e102a48f7d17e1\",\n                            \"lessThan\": \"9176e18681cb0d34c5acc87bda224f5652af2ab8\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e284fc280473bed23f2e1ed324e102a48f7d17e1\",\n                            \"lessThan\": \"e490d8c5a54e0dd1ab22417d72c3a7319cf0f030\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e284fc280473bed23f2e1ed324e102a48f7d17e1\",\n                            \"lessThan\": \"77a35be582dff4c80442ebcdce24d45eed8a6ce4\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e284fc280473bed23f2e1ed324e102a48f7d17e1\",\n                            \"lessThan\": \"02aae5fcdd34c3a55a243d80a1b328a35852a35c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e284fc280473bed23f2e1ed324e102a48f7d17e1\",\n                            \"lessThan\": \"edecce7abd7152b48e279b4fa0a883d1839bb577\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e284fc280473bed23f2e1ed324e102a48f7d17e1\",\n                            \"lessThan\": \"d33e5d6631ac4fddda235a7815babc9d3f124299\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e284fc280473bed23f2e1ed324e102a48f7d17e1\",\n                            \"lessThan\": \"8b13df5aa877b9e4541e301a58a84c42d84d2d9a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e284fc280473bed23f2e1ed324e102a48f7d17e1\",\n                            \"lessThan\": \"cb79fa7118c150c3c76a327894bb2eb878c02619\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4.17\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.17\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.300\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.245\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.194\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.155\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.109\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.50\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.16.10\",\n                            \"lessThanOrEqual\": \"6.16.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.17\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H","score":7.3,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/9176e18681cb0d34c5acc87bda224f5652af2ab8","https://git.kernel.org/stable/c/e490d8c5a54e0dd1ab22417d72c3a7319cf0f030","https://git.kernel.org/stable/c/77a35be582dff4c80442ebcdce24d45eed8a6ce4","https://git.kernel.org/stable/c/02aae5fcdd34c3a55a243d80a1b328a35852a35c","https://git.kernel.org/stable/c/edecce7abd7152b48e279b4fa0a883d1839bb577","https://git.kernel.org/stable/c/d33e5d6631ac4fddda235a7815babc9d3f124299","https://git.kernel.org/stable/c/8b13df5aa877b9e4541e301a58a84c42d84d2d9a","https://git.kernel.org/stable/c/cb79fa7118c150c3c76a327894bb2eb878c02619"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-39968","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-39968","identifiers":["CVE-2025-39968"]},"retained":false,"historicalAffected":[]}],"coverage":[]}