CVE-2025-39973

CVE-2025-39973

High · published October 15, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
4.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

i40e: add validation for ring_len param

The `ring_len` parameter provided by the virtual function (VF)

is assigned directly to the hardware memory context (HMC) without

any validation.

To address this, introduce an upper boundary check for both Tx and Rx

queue lengths. The maximum number of descriptors supported by the

hardware is 8k-32.

Additionally, enforce alignment constraints: Tx rings must be a multiple

of 8, and Rx rings must be a multiple of 32.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00154 · 4.2th percentile
Published
2025-10-15T12:15Z
References (8)
EPSS history
Timeline
  • 15 OCT 07:55Z
    i40e: add validation for ring_len param
    cvelistv5