Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2025-39972

Опубликовано: 15 окт. 2025
Источник: redhat
CVSS3: 5.3
EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in i40e_validate_queue_map Ensure idx is within range of active/initialized TCs when iterating over vf->ch[idx] in i40e_validate_queue_map().

Отчет

This vulnerability is rated as Moderate impact because exploitation requires access to a virtual function (VF) interface on systems equipped with Intel 700 Series network hardware running SR-IOV. A malicious or compromised guest operating system managing an allocated VF can trigger an out-of-bounds read during queue map validation in the host physical function driver. While this flaw can result in a host kernel crash leading to a denial of service, it cannot be exploited remotely and does not directly permit arbitrary code execution.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 10kernelFix deferred
Red Hat Enterprise Linux 6kernelNot affected
Red Hat Enterprise Linux 7kernelFix deferred
Red Hat Enterprise Linux 7kernel-rtFix deferred
Red Hat Enterprise Linux 8kernelFix deferred
Red Hat Enterprise Linux 8kernel-rtFix deferred
Red Hat Enterprise Linux 9kernelFix deferred
Red Hat Enterprise Linux 9kernel-rtFix deferred

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=2404110kernel: i40e: fix idx validation in i40e_validate_queue_map

EPSS

Процентиль: 5%
0.00158
Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in i40e_validate_queue_map Ensure idx is within range of active/initialized TCs when iterating over vf->ch[idx] in i40e_validate_queue_map().

CVSS3: 8.8
nvd
около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in i40e_validate_queue_map Ensure idx is within range of active/initialized TCs when iterating over vf->ch[idx] in i40e_validate_queue_map().

CVSS3: 9.8
msrc
около 1 года назад

i40e: fix idx validation in i40e_validate_queue_map

CVSS3: 8.8
debian
около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: i ...

CVSS3: 8.8
github
около 1 года назад

In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in i40e_validate_queue_map Ensure idx is within range of active/initialized TCs when iterating over vf->ch[idx] in i40e_validate_queue_map().

EPSS

Процентиль: 5%
0.00158
Низкий

5.3 Medium

CVSS3