{"id":"CVE-2025-39970","revision":"0b79d396739a41d7b12c26e5b19ec2bd","records":[{"revision":"0b79d396739a41d7b12c26e5b19ec2bd","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-39970","aliases":[],"title":"i40e: fix input validation logic for action_meta","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ni40e: fix input validation logic for action_meta\n\nFix condition to check 'greater or equal' to prevent OOB dereference.","state":0,"publishedAt":"2025-10-15T07:55:53.61+00:00","modifiedAt":"2026-10-15T22:02:34.702+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"e284fc280473bed23f2e1ed324e102a48f7d17e1\",\n                            \"lessThan\": \"a88c1b2746eccf00e2094b187945f0f1e990b400\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e284fc280473bed23f2e1ed324e102a48f7d17e1\",\n                            \"lessThan\": \"28465770ca3b694286ff9ed6dfd558413f57d98f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e284fc280473bed23f2e1ed324e102a48f7d17e1\",\n                            \"lessThan\": \"f8c8e11825b24661596fa8db2f0981ba17ed0817\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e284fc280473bed23f2e1ed324e102a48f7d17e1\",\n                            \"lessThan\": \"461e0917eedcd159d87f3ea846754a1e07d7e78a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e284fc280473bed23f2e1ed324e102a48f7d17e1\",\n                            \"lessThan\": \"3883e9702b6a4945e93b16c070f338a9f5b496f9\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e284fc280473bed23f2e1ed324e102a48f7d17e1\",\n                            \"lessThan\": \"3118f41d8fa57b005f53ec3db2ba5eab1d7ba12b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e284fc280473bed23f2e1ed324e102a48f7d17e1\",\n                            \"lessThan\": \"560e1683410585fbd5df847f43433c4296f0d222\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e284fc280473bed23f2e1ed324e102a48f7d17e1\",\n                            \"lessThan\": \"9739d5830497812b0bdeaee356ddefbe60830b88\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4.17\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.17\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.300\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.245\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.194\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.155\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.109\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.50\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.16.10\",\n                            \"lessThanOrEqual\": \"6.16.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.17\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","score":8.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/a88c1b2746eccf00e2094b187945f0f1e990b400","https://git.kernel.org/stable/c/28465770ca3b694286ff9ed6dfd558413f57d98f","https://git.kernel.org/stable/c/f8c8e11825b24661596fa8db2f0981ba17ed0817","https://git.kernel.org/stable/c/461e0917eedcd159d87f3ea846754a1e07d7e78a","https://git.kernel.org/stable/c/3883e9702b6a4945e93b16c070f338a9f5b496f9","https://git.kernel.org/stable/c/3118f41d8fa57b005f53ec3db2ba5eab1d7ba12b","https://git.kernel.org/stable/c/560e1683410585fbd5df847f43433c4296f0d222","https://git.kernel.org/stable/c/9739d5830497812b0bdeaee356ddefbe60830b88"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-39970","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-39970","identifiers":["CVE-2025-39970"]},"retained":false,"historicalAffected":[]}],"coverage":[]}