ROOT-OS-DEBIAN-11-CVE-2025-39972 CVE-2025-39972 in rootio-linux - Patched by Root

Root has patched CVE-2025-39972 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...

CVE-2025-39972

creationtimestamp| type| source ---|---|--- 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260408 2026-05-10 18:00:00+00:00| seen|...

UBUNTU-CVE-2025-39972

In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in i40evalidatequeuemap Ensure idx is within range of active/initialized TCs when iterating over vf-chidx in i40evalidatequeuemap...

CVE-2025-39972

CVE-2025-39972 affects the Linux kernel i40e driver. The vulnerability stems from insufficient idx validation in i40e_validate_queue_map(), where idx may reference vf->ch[idx] outside the range of active/initialized TCs, risking out-of-bounds access. The issue has been fixed in the upstream ke...