-

CVE-2025-39970

i40e: fix input validation logic for action_meta

In the Linux kernel, the following vulnerability has been resolved:

i40e: fix input validation logic for action_meta

Fix condition to check 'greater or equal' to prevent OOB dereference.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version e284fc280473bed23f2e1ed324e102a48f7d17e1
Version < a88c1b2746eccf00e2094b187945f0f1e990b400
Status affected
Version e284fc280473bed23f2e1ed324e102a48f7d17e1
Version < 28465770ca3b694286ff9ed6dfd558413f57d98f
Status affected
Version e284fc280473bed23f2e1ed324e102a48f7d17e1
Version < f8c8e11825b24661596fa8db2f0981ba17ed0817
Status affected
Version e284fc280473bed23f2e1ed324e102a48f7d17e1
Version < 461e0917eedcd159d87f3ea846754a1e07d7e78a
Status affected
Version e284fc280473bed23f2e1ed324e102a48f7d17e1
Version < 3883e9702b6a4945e93b16c070f338a9f5b496f9
Status affected
Version e284fc280473bed23f2e1ed324e102a48f7d17e1
Version < 3118f41d8fa57b005f53ec3db2ba5eab1d7ba12b
Status affected
Version e284fc280473bed23f2e1ed324e102a48f7d17e1
Version < 560e1683410585fbd5df847f43433c4296f0d222
Status affected
Version e284fc280473bed23f2e1ed324e102a48f7d17e1
Version < 9739d5830497812b0bdeaee356ddefbe60830b88
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.17
Status affected
Version 0
Version < 4.17
Status unaffected
Version <= 5.4.*
Version 5.4.300
Status unaffected
Version <= 5.10.*
Version 5.10.245
Status unaffected
Version <= 5.15.*
Version 5.15.194
Status unaffected
Version <= 6.1.*
Version 6.1.155
Status unaffected
Version <= 6.6.*
Version 6.6.109
Status unaffected
Version <= 6.12.*
Version 6.12.50
Status unaffected
Version <= 6.16.*
Version 6.16.10
Status unaffected
Version <= *
Version 6.17
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.07% 0.203
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.