CVE-2025-39972

CVE-2025-39972 affects the Linux kernel i40e driver. The vulnerability stems from insufficient idx validation in i40e_validate_queue_map(), where idx may reference vf->ch[idx] outside the range of active/initialized TCs, risking out-of-bounds access. The issue has been fixed in the upstream ke...