CVE-2025-39973

CVE-2025-39973 is a Linux kernel vulnerability in the i40e driver where the VF-provided ring_len was assigned to hardware context without validation. The fix adds upper-bound checks for Tx/Rx queue lengths (hardware supports 8k–32 descriptors) and enforces alignment: Tx rings must be multiples of...