AZL-68483 CVE-2025-39972 affecting package kernel for versions less than 6.6.112.1-1

In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in i40evalidatequeuemap Ensure idx is within range of active/initialized TCs when iterating over vf-chidx in i40evalidatequeuemap...

UBUNTU-CVE-2025-39971

In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in config queues msg Ensure idx is within range of active/initialized TCs when iterating over vf-chidx in i40evcconfigqueuesmsg...

UBUNTU-CVE-2025-39968

In the Linux kernel, the following vulnerability has been resolved: i40e: add max boundary check for VF filters There is no check for max filters that VF can request. Add it...

UBUNTU-CVE-2025-39973

In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ringlen param The ringlen parameter provided by the virtual function VF is assigned directly to the hardware memory context HMC without any validation. To address this, introduce an upper boundary check f...

UBUNTU-CVE-2025-39969

In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only state in which VF is actually active so it should not be used to determine if a VF is allowed to obtain resources. Use...

UBUNTU-CVE-2025-39970

In the Linux kernel, the following vulnerability has been resolved: i40e: fix input validation logic for actionmeta Fix condition to check 'greater or equal' to prevent OOB dereference...

CVE-2025-39971

The CVE-2025-39971 entry describes a Linux kernel issue in i40e: idx validation in config_queues_msg() where vf->ch[idx] could be out of range. The connected advisories confirm this CVE is addressed by a kernel fix (idx range validation and related bounds checks) and are associated with variou...

CVE-2025-39972 i40e: fix idx validation in i40e_validate_queue_map

In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in i40evalidatequeuemap Ensure idx is within range of active/initialized TCs when iterating over vf-chidx in i40evalidatequeuemap...

CVE-2025-39971 i40e: fix idx validation in config queues msg

In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in config queues msg Ensure idx is within range of active/initialized TCs when iterating over vf-chidx in i40evcconfigqueuesmsg...

CVE-2025-39972 i40e: fix idx validation in i40e_validate_queue_map

In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in i40evalidatequeuemap Ensure idx is within range of active/initialized TCs when iterating over vf-chidx in i40evalidatequeuemap...

CVE-2025-39970

The CVE-2025-39970 issue concerns the Linux kernel i40e driver. A faulty input validation path for action_meta allowed an out-of-bounds dereference; the fix changes the comparison to require a greater-or-equal check to prevent OOB access. In public advisories (EulerOS kernel advisories) this vuln...

CVE-2025-39970 i40e: fix input validation logic for action_meta

In the Linux kernel, the following vulnerability has been resolved: i40e: fix input validation logic for actionmeta Fix condition to check 'greater or equal' to prevent OOB dereference...

CVE-2025-39970 i40e: fix input validation logic for action_meta

In the Linux kernel, the following vulnerability has been resolved: i40e: fix input validation logic for actionmeta Fix condition to check 'greater or equal' to prevent OOB dereference...

CVE-2025-39969

The CVE-2025-39969 entry concerns the Linux kernel i40e driver. A vulnerability existed where VF state I40E_VF_STATE_ACTIVE was incorrectly used to decide if a Virtual Function (VF) could obtain resources. The fix switches to using I40E_VF_STATE_RESOURCES_LOADED, a state flag that is set only in ...

CVE-2025-39969 i40e: fix validation of VF state in get resources

In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only state in which VF is actually active so it should not be used to determine if a VF is allowed to obtain resources. Use...

CVE-2025-39968

CVE-2025-39968: In the Linux kernel i40e driver, a missing boundary check allowed a VF to request more filters than supported. The fix adds a max boundary check for VF filters to prevent out-of-bounds or excessive requests. Connected advisories confirm the issue and the patch/commit references im...

CVE-2025-39968 i40e: add max boundary check for VF filters

In the Linux kernel, the following vulnerability has been resolved: i40e: add max boundary check for VF filters There is no check for max filters that VF can request. Add it...

CVE-2025-39968 i40e: add max boundary check for VF filters

In the Linux kernel, the following vulnerability has been resolved: i40e: add max boundary check for VF filters There is no check for max filters that VF can request. Add it...

kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw

In the Linux kernel, the following vulnerability has been resolved: i40e: fix MMIO write access to an invalid page in i40eclearhw When the device sends a specific input, an integer underflow can occur, leading to MMIO write access to an invalid page. Prevent the integer underflow by changing the...

PT-2025-42244

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the i40e network driver. The issue involves incorrect validation of Virtual Function VF state when obtaining resources. Specifically, the I40...