CVE-2025-39853

In the Linux kernel, the following vulnerability has been resolved: i40e: Fix potential invalid access when MAC list is empty list_first_entry() never returns NULL - if the list is empty, it still returns a pointer to an invalid object, leading to potential invalid memory access when dereferenced. Fix this by using list_first_entry_or_null instead of list_first_entry.

Affected products

Debian, Linuxmint, Linux Kernel, Red Os, Suse, Ubuntu, I40E

Linux Linux Kernel

< 5.4.299, 5.10.243, 5.15.192, 6.1.151, 6.6.105, 6.12.46, 6.16.6, 6.17

CVSS 3.1

7.1 HIGH

EPSS

0.2% (5th percentile)

Weakness

CWE-125

NVD status

Modified

Published

2025-09-19

No exploit for CVE-2025-39853 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.