CVE-2025-38200

Summary

In the Linux kernel, the following vulnerability has been resolved:

i40e: fix MMIO write access to an invalid page in i40e_clear_hw

When the device sends a specific input, an integer underflow can occur, leading to MMIO write access to an invalid page.

Prevent the integer underflow by changing the type of related variables.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux1bff652941c4d94f97610c9a30473aad6f5b2fff < 872607632c658d3739e4e7889e4f3c419ae2c193affected
LinuxLinux1bff652941c4d94f97610c9a30473aad6f5b2fff < 5e75c9082987479e647c75ec8fdf18fa68263c42affected
LinuxLinux1bff652941c4d94f97610c9a30473aad6f5b2fff < fecb2fc3fc10c95724407cc45ea35af4a65cdde2affected
LinuxLinux1bff652941c4d94f97610c9a30473aad6f5b2fff < d88a1e8f024ba26e19350958fecbf771a9960352affected
LinuxLinux1bff652941c4d94f97610c9a30473aad6f5b2fff < 8cde755f56163281ec2c46b4ae8b61f532758a6faffected
LinuxLinux1bff652941c4d94f97610c9a30473aad6f5b2fff < 3502dd42f178dae9d54696013386bb52b4f2e655affected
LinuxLinux1bff652941c4d94f97610c9a30473aad6f5b2fff < 2a1f4f2e36442a9bdf771acf6ee86f3cf876e5caaffected
LinuxLinux1bff652941c4d94f97610c9a30473aad6f5b2fff < 015bac5daca978448f2671478c553ce1f300c21eaffected
LinuxLinux3.12affected
LinuxLinux0 < 3.12unaffected
LinuxLinux5.4.295 <= 5.4.*unaffected
LinuxLinux5.10.239 <= 5.10.*unaffected
LinuxLinux5.15.186 <= 5.15.*unaffected
LinuxLinux6.1.142 <= 6.1.*unaffected
LinuxLinux6.6.95 <= 6.6.*unaffected
LinuxLinux6.12.35 <= 6.12.*unaffected
LinuxLinux6.15.4 <= 6.15.*unaffected
LinuxLinux6.16 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References