-

CVE-2025-39969

In the Linux kernel, the following vulnerability has been resolved:

i40e: fix validation of VF state in get resources

VF state I40E_VF_STATE_ACTIVE is not the only state in which
VF is actually active so it should not be used to determine
if a VF is allowed to obtain resources.

Use I40E_VF_STATE_RESOURCES_LOADED that is set only in
i40e_vc_get_vf_resources_msg() and cleared during reset.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version < 185745d56ec958bf8aa773828213237dfcc32f5a
Version 171527da84149c2c7aa6a60a64b09d24f3546298
Status affected
Version < f47876788a23de296c42ef9d505b5c1630f0b4b8
Version eb87117c27e729b0aeef4d72ed40d6a1761b0f68
Status affected
Version < 8e35c80f8570426fe0f0cc92b151ebd835975f22
Version 2132643b956f553f5abddc9bae20dae267b082e0
Status affected
Version < 6c3981fd59ef11a75005ac9978f034da5a168b6a
Version 61125b8be85dfbc7e9c7fe1cc6c6d631ab603516
Status affected
Version < e748f1ee493f88e38b77363a60499f979d42c58a
Version 61125b8be85dfbc7e9c7fe1cc6c6d631ab603516
Status affected
Version < 6128bbc7adc25c87c2f64b5eb66a280b78ef7ab7
Version 61125b8be85dfbc7e9c7fe1cc6c6d631ab603516
Status affected
Version < a991dc56d3e9a2c3db87d0c3f03c24f6595400f1
Version 61125b8be85dfbc7e9c7fe1cc6c6d631ab603516
Status affected
Version < 877b7e6ffc23766448236e8732254534c518ba42
Version 61125b8be85dfbc7e9c7fe1cc6c6d631ab603516
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.16
Status affected
Version < 5.16
Version 0
Status unaffected
Version <= 5.4.*
Version 5.4.300
Status unaffected
Version <= 5.10.*
Version 5.10.245
Status unaffected
Version <= 5.15.*
Version 5.15.194
Status unaffected
Version <= 6.1.*
Version 6.1.155
Status unaffected
Version <= 6.6.*
Version 6.6.109
Status unaffected
Version <= 6.12.*
Version 6.12.50
Status unaffected
Version <= 6.16.*
Version 6.16.10
Status unaffected
Version <= *
Version 6.17
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.05% 0.157
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String