CVE-2025-39970

In the Linux kernel, the following vulnerability has been resolved:

i40e: fix input validation logic for action_meta

Fix condition to check 'greater or equal' to prevent OOB dereference.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because the attack surface is limited to systems operating physical Intel 700 Series network adapters driven by the i40e module. Triggering this flaw requires access to a virtual function or administrative capabilities on the local host to pass malformed messages over the virtual channel. Under typical configurations, the resulting out-of-bounds dereference causes a kernel panic, limiting the primary consequence to a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.