CVE-2025-39972

CVE-2025-39972 concerns the Linux kernel i40e driver. The vulnerability arises in the i40e_validate_queue_map() function where idx could be out of range when iterating over vf->ch[idx], potentially impacting nearby data. The fix is to validate idx within the range of active/initialized TCs dur...