{"id":"CVE-2025-39968","title":"i40e: add max boundary check for VF filters","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ni40e: add max boundary check for VF filters\n\nThere is no check for max filters that VF can request. Add it.","severity":"high","cvss":7.3,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H","cvssSource":"cna","vendor":"Linux","product":"Linux","affected":["Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 < 9176e18681cb0d34c5acc87bda224f5652af2ab8","Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 < e490d8c5a54e0dd1ab22417d72c3a7319cf0f030","Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 < 77a35be582dff4c80442ebcdce24d45eed8a6ce4","Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 < 02aae5fcdd34c3a55a243d80a1b328a35852a35c","Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 < edecce7abd7152b48e279b4fa0a883d1839bb577","Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 < d33e5d6631ac4fddda235a7815babc9d3f124299","Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 < 8b13df5aa877b9e4541e301a58a84c42d84d2d9a","Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 < cb79fa7118c150c3c76a327894bb2eb878c02619","Linux 4.17"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-15T21:55:21.412012Z"},"published":"2025-10-15","updated":"2026-10-15","sourceUpdated":"2026-10-15T22:02:34.443Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-39968","references":[{"url":"https://git.kernel.org/stable/c/9176e18681cb0d34c5acc87bda224f5652af2ab8"},{"url":"https://git.kernel.org/stable/c/e490d8c5a54e0dd1ab22417d72c3a7319cf0f030"},{"url":"https://git.kernel.org/stable/c/77a35be582dff4c80442ebcdce24d45eed8a6ce4"},{"url":"https://git.kernel.org/stable/c/02aae5fcdd34c3a55a243d80a1b328a35852a35c"},{"url":"https://git.kernel.org/stable/c/edecce7abd7152b48e279b4fa0a883d1839bb577"},{"url":"https://git.kernel.org/stable/c/d33e5d6631ac4fddda235a7815babc9d3f124299"},{"url":"https://git.kernel.org/stable/c/8b13df5aa877b9e4541e301a58a84c42d84d2d9a"},{"url":"https://git.kernel.org/stable/c/cb79fa7118c150c3c76a327894bb2eb878c02619"}],"tags":["cve.org"],"epss":0.00147,"epssPercentile":0.03853,"ingestedAt":"2026-10-15T22:48:25.532Z","slug":"CVE-2025-39968","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ni40e: add max boundary check for VF filters\n\nThere is no check for max filters that VF can request. Add it.\n\n## Affected\n\n- `Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 < 9176e18681cb0d34c5acc87bda224f5652af2ab8`\n- `Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 < e490d8c5a54e0dd1ab22417d72c3a7319cf0f030`\n- `Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 < 77a35be582dff4c80442ebcdce24d45eed8a6ce4`\n- `Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 < 02aae5fcdd34c3a55a243d80a1b328a35852a35c`\n- `Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 < edecce7abd7152b48e279b4fa0a883d1839bb577`\n- `Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 < d33e5d6631ac4fddda235a7815babc9d3f124299`\n- `Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 < 8b13df5aa877b9e4541e301a58a84c42d84d2d9a`\n- `Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 < cb79fa7118c150c3c76a327894bb2eb878c02619`\n- `Linux 4.17`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":40.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}