CVE-2025-39973

A flaw was identified in the Intel “i40e” Ethernet driver in the Linux Kernel where the ring_len parameter supplied by a VF (virtual function) is passed unchecked to the hardware memory context. If a malicious Virtual function provides a too-large or misaligned ring_len, it may allow the device to configure excessive Tx/Rx queue length leading to memory corruption or other undefined behaviour in the driver context.

This vulnerability is rated as Moderate severity because it requires specific hardware configurations where Intel 700 series network adapters run with SR-IOV enabled, and virtual functions are assigned to untrusted virtual machines or tenants. On standard Red Hat Enterprise Linux deployments, SR-IOV virtual functions are not instantiated by default, significantly limiting the exposure of physical function hosts. An attacker must possess privileged access within a provisioned guest to transmit malformed ring configuration requests across the virtual channel to affect the host kernel.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria, comprising ease of use and deployment, applicability to widespread installation base or stability.