VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 15, 2025· Updated Apr 15, 2026

CVE-2025-39973

CVE-2025-39973

Description

In the Linux kernel, the following vulnerability has been resolved:

i40e: add validation for ring_len param

The ring_len parameter provided by the virtual function (VF) is assigned directly to the hardware memory context (HMC) without any validation.

To address this, introduce an upper boundary check for both Tx and Rx queue lengths. The maximum number of descriptors supported by the hardware is 8k-32. Additionally, enforce alignment constraints: Tx rings must be a multiple of 8, and Rx rings must be a multiple of 32.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

320

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.