-

CVE-2025-39898

In the Linux kernel, the following vulnerability has been resolved:

e1000e: fix heap overflow in e1000_set_eeprom

Fix a possible heap overflow in e1000_set_eeprom function by adding
input validation for the requested length of the change in the EEPROM.
In addition, change the variable type from int to size_t for better
code practices and rearrange declarations to RCT.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version < ea832ec0583e2398ea0c5ed8d902c923e16f53c4
Version bc7f75fa97884d41efbfde1397b621fefb2550b4
Status affected
Version < ce8829d3d44b8622741bccca9f4408bc3da30b2b
Version bc7f75fa97884d41efbfde1397b621fefb2550b4
Status affected
Version < 99a8772611e2d7ec318be7f0f072037914a1f509
Version bc7f75fa97884d41efbfde1397b621fefb2550b4
Status affected
Version < b48adcacc34fbbc49046a7ee8a97839bef369c85
Version bc7f75fa97884d41efbfde1397b621fefb2550b4
Status affected
Version < 50a84d5c814039ad2abe2748aec3e89324a548a7
Version bc7f75fa97884d41efbfde1397b621fefb2550b4
Status affected
Version < b370f7b1f470a8d5485cc1e40e8ff663bb55d712
Version bc7f75fa97884d41efbfde1397b621fefb2550b4
Status affected
Version < 0aec3211283482cfcdd606d1345e1f9acbcabd31
Version bc7f75fa97884d41efbfde1397b621fefb2550b4
Status affected
Version < 90fb7db49c6dbac961c6b8ebfd741141ffbc8545
Version bc7f75fa97884d41efbfde1397b621fefb2550b4
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.24
Status affected
Version < 2.6.24
Version 0
Status unaffected
Version <= 5.4.*
Version 5.4.299
Status unaffected
Version <= 5.10.*
Version 5.10.243
Status unaffected
Version <= 5.15.*
Version 5.15.192
Status unaffected
Version <= 6.1.*
Version 6.1.151
Status unaffected
Version <= 6.6.*
Version 6.6.105
Status unaffected
Version <= 6.12.*
Version 6.12.46
Status unaffected
Version <= 6.16.*
Version 6.16.6
Status unaffected
Version <= *
Version 6.17
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.04% 0.116
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String