Lucene search
K

16 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.1 views

Astra Linux - уязвимость в linux-5.10, linux-6.1, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: i40e: Fixing the validation of VF state in get resources. The state I40EVFSTATEACTIVE is not the only state in which a VF is actually active. Therefore, it should not be used to determine whether a VF is allowed to obtain...

6.5AI score0.00063EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/04/22 12:0 a.m.3 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013842)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013842 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only stat...

6.8AI score0.00063EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/21 12:0 a.m.3 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011410)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011410 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only stat...

6.8AI score0.00063EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/10/27 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2025-39969

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only state in which VF is actually active so it should not be used to...

7.3AI score0.00063EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2025/10/16 11:24 p.m.2 views

SUSE CVE-2025-39969

In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only state in which VF is actually active so it should not be used to determine if a VF is allowed to obtain resources. Use...

4.4CVSS6.4AI score0.00063EPSS
Exploits0References19
RedhatCVE
RedhatCVE
added 2025/10/16 12:25 p.m.3 views

CVE-2025-39969

In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only state in which VF is actually active so it should not be used to determine if a VF is allowed to obtain resources. Use...

7CVSS5.8AI score0.00063EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/15 9:30 a.m.2 views

EUVD-2025-34603

In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only state in which VF is actually active so it should not be used to determine if a VF is allowed to obtain resources. Use...

5.9AI score0.00063EPSS
Exploits0References9
NVD
NVD
added 2025/10/15 8:15 a.m.3 views

CVE-2025-39969

In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only state in which VF is actually active so it should not be used to determine if a VF is allowed to obtain resources. Use...

0.00063EPSS
Exploits0References8
OSV
OSV
added 2025/10/15 8:15 a.m.3 views

AZL-68489 CVE-2025-39969 affecting package kernel for versions less than 6.6.112.1-1

In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only state in which VF is actually active so it should not be used to determine if a VF is allowed to obtain resources. Use...

6.8AI score0.00063EPSS
Exploits0References1
OSV
OSV
added 2025/10/15 8:15 a.m.0 views

UBUNTU-CVE-2025-39969

In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only state in which VF is actually active so it should not be used to determine if a VF is allowed to obtain resources. Use...

6.6AI score0.00063EPSS
Exploits0References35
Cvelist
Cvelist
added 2025/10/15 7:55 a.m.6 views

CVE-2025-39969 i40e: fix validation of VF state in get resources

In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only state in which VF is actually active so it should not be used to determine if a VF is allowed to obtain resources. Use...

0.00063EPSS
Exploits0References8
OSV
OSV
added 2025/10/15 7:55 a.m.1 views

CVE-2025-39969 i40e: fix validation of VF state in get resources

In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only state in which VF is actually active so it should not be used to determine if a VF is allowed to obtain resources. Use...

6.4AI score0.00063EPSS
Exploits0References11
CVE
CVE
added 2025/10/15 7:55 a.m.7 views

CVE-2025-39969

The CVE-2025-39969 entry concerns the Linux kernel i40e driver. A vulnerability existed where VF state I40E_VF_STATE_ACTIVE was incorrectly used to decide if a Virtual Function (VF) could obtain resources. The fix switches to using I40E_VF_STATE_RESOURCES_LOADED, a state flag that is set only in ...

6AI score0.00063EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2025/10/15 12:0 a.m.1 views

PT-2025-42244

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the i40e network driver. The issue involves incorrect validation of Virtual Function VF state when obtaining resources. Specifically, the I40...

5.2CVSS7.3AI score0.00063EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2021/06/18 12:0 a.m.116 views

McAfee Agent 5.x prior to 5.7.3 Multiple Vulnerabilities (SB10362)

The version of McAfee Agent, formerly McAfee ePolicy Orchestrator ePO Agent, installed on the remote host is 5.x prior to 5.7.3. It is, therefore, affected by the following vulnerabilities: - An improper privilege management vulnerability exists due to a local user having the ability to edit the...

7.3CVSS5.9AI score0.00044EPSS
Exploits0References3
OSV
OSV
added 2018/06/11 9:29 p.m.0 views

CVE-2018-5137

A legacy extension's non-contentaccessible, defined resources can be loaded by an arbitrary web page through script. This script does this by using a maliciously crafted path string to reference the resources. Note: this vulnerability does not affect WebExtensions. This vulnerability affects...

7.5CVSS7.4AI score
Exploits0References5
Rows per page
Query Builder