CVE-2025-39973 i40e: add validation for ring_len param

In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ringlen param The ringlen parameter provided by the virtual function VF is assigned directly to the hardware memory context HMC without any validation. To address this, introduce an upper boundary check f...

CVE-2025-39973

CVE-2025-39973 is a Linux kernel vulnerability in the i40e driver where the VF-provided ring_len was assigned to hardware context without validation. The fix adds upper-bound checks for Tx/Rx queue lengths (hardware supports 8k–32 descriptors) and enforces alignment: Tx rings must be multiples of...