---
id: CVE-2025-39968
title: 'i40e: add max boundary check for VF filters'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  i40e: add max boundary check for VF filters

  There is no check for max filters that VF can request. Add it.
severity: high
cvss: 7.3
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 <
    9176e18681cb0d34c5acc87bda224f5652af2ab8
  - >-
    Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 <
    e490d8c5a54e0dd1ab22417d72c3a7319cf0f030
  - >-
    Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 <
    77a35be582dff4c80442ebcdce24d45eed8a6ce4
  - >-
    Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 <
    02aae5fcdd34c3a55a243d80a1b328a35852a35c
  - >-
    Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 <
    edecce7abd7152b48e279b4fa0a883d1839bb577
  - >-
    Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 <
    d33e5d6631ac4fddda235a7815babc9d3f124299
  - >-
    Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 <
    8b13df5aa877b9e4541e301a58a84c42d84d2d9a
  - >-
    Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 <
    cb79fa7118c150c3c76a327894bb2eb878c02619
  - Linux 4.17
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-15T21:55:21.412012Z'
published: '2025-10-15'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T22:02:34.443Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-39968'
references:
  - url: 'https://git.kernel.org/stable/c/9176e18681cb0d34c5acc87bda224f5652af2ab8'
  - url: 'https://git.kernel.org/stable/c/e490d8c5a54e0dd1ab22417d72c3a7319cf0f030'
  - url: 'https://git.kernel.org/stable/c/77a35be582dff4c80442ebcdce24d45eed8a6ce4'
  - url: 'https://git.kernel.org/stable/c/02aae5fcdd34c3a55a243d80a1b328a35852a35c'
  - url: 'https://git.kernel.org/stable/c/edecce7abd7152b48e279b4fa0a883d1839bb577'
  - url: 'https://git.kernel.org/stable/c/d33e5d6631ac4fddda235a7815babc9d3f124299'
  - url: 'https://git.kernel.org/stable/c/8b13df5aa877b9e4541e301a58a84c42d84d2d9a'
  - url: 'https://git.kernel.org/stable/c/cb79fa7118c150c3c76a327894bb2eb878c02619'
tags:
  - cve.org
epss: 0.00147
epssPercentile: 0.03853
ingestedAt: '2026-10-15T22:48:25.532Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

i40e: add max boundary check for VF filters

There is no check for max filters that VF can request. Add it.

## Affected

- `Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 < 9176e18681cb0d34c5acc87bda224f5652af2ab8`
- `Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 < e490d8c5a54e0dd1ab22417d72c3a7319cf0f030`
- `Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 < 77a35be582dff4c80442ebcdce24d45eed8a6ce4`
- `Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 < 02aae5fcdd34c3a55a243d80a1b328a35852a35c`
- `Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 < edecce7abd7152b48e279b4fa0a883d1839bb577`
- `Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 < d33e5d6631ac4fddda235a7815babc9d3f124299`
- `Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 < 8b13df5aa877b9e4541e301a58a84c42d84d2d9a`
- `Linux >= e284fc280473bed23f2e1ed324e102a48f7d17e1 < cb79fa7118c150c3c76a327894bb2eb878c02619`
- `Linux 4.17`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.