CVE-2025-39969

In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40E_VF_STATE_ACTIVE is not the only state in which VF is actually active so it should not be used to determine if a VF is allowed to obtain resources. Use I40E_VF_STATE_RESOURCES_LOADED that is set only in i40e_vc_get_vf_resources_msg() and cleared during reset.

Affected products

Debian, Linuxmint, Linux Kernel, Suse, Ubuntu, I40E

CVSS 3.1

8.8 HIGH

EPSS

0.1% (4th percentile)

NVD status

Deferred

Published

2025-10-15

No exploit for CVE-2025-39969 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.