CVE-2025-39968: linux
CVSS: 7.3v3.1HighDeferred
AliasesUBUNTU-CVE-2025-39968DEBIAN-CVE-2025-39968
Published 15-10-2025Last modified 15-10-2026
Vulnerability summary
CVE-2025-39968 is a high (CVSS 7.3) vulnerability in linux. EPSS estimates a 0.15% chance of exploitation in the next 30 days, higher than 3.5% of scored vulnerabilities.
CVSS score
7.3/10
010
High · v3.1 (CVE.org)EPSS score
0.15%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 51 · Related 46DLA-4379-1DLA-4404-1DSA-6053-1MGASA-2025-0309MGASA-2025-0310OPENSUSE-SU-2025:20091-1SUSE-SU-2025:21040-1SUSE-SU-2025:21052-1SUSE-SU-2025:21056-1SUSE-SU-2025:21064-1SUSE-SU-2025:21080-1SUSE-SU-2025:21147-1SUSE-SU-2025:21180-1SUSE-SU-2025:4057-1SUSE-SU-2025:4111-1SUSE-SU-2025:4128-1SUSE-SU-2025:4132-1SUSE-SU-2025:4135-1SUSE-SU-2025:4139-1SUSE-SU-2025:4140-1SUSE-SU-2025:4141-1SUSE-SU-2025:4149-1SUSE-SU-2025:4188-1SUSE-SU-2025:4189-1SUSE-SU-2025:4301-1SUSE-SU-2025:4320-1SUSE-SU-2026:20561-1USN-8033-1USN-8033-2USN-8033-3USN-8033-4USN-8033-5USN-8033-6USN-8033-7USN-8033-8USN-8034-1USN-8034-2USN-8095-1USN-8095-2USN-8095-3USN-8095-4USN-8095-5USN-8100-1USN-8125-1USN-8126-1USN-8141-1USN-8163-1USN-8163-2USN-8165-1USN-8243-1USN-8261-1
Timeline
- 15-10-2025PublishedVulnerability first disclosed.
- 15-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: i40e: add max boundary check for VF filters There is no check for max filters that VF can request. Add it.
CVSS metrics
4 scores · 4 sources · 1 versionHigh 7.3Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:HSourcesAll 4 agree
- OSV · UbuntuEcosystem advisory · calculated7.3HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H
- OSV · DebianEcosystem advisory · calculated7.3HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H
- NVDNIST7.3HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H
EPSS trend
Probability
0.15%
Chance of exploitation in the next 30 days
Percentile
4%
Versus all other CVEs
30-day change
0.00 pp
From 0.15% on 19-09-2026
19-09-202619-10-2026
EPSS score0.15%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu143 products
- linuxAll versions (No fix recorded) | < 5.15.0-170.180 | < 6.8.0-106.106 | < 6.17.0-6.6
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.15.0-1100.107 | < 6.8.0-1050.53 | < 6.17.0-1003.3
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian1 product
- linux< 6.1.158-1 | < 6.12.57-1 | < 6.16.10-1
Linux1 product
- linux≥ e284fc280473bed23f2e1ed324e102a48f7d17e1, < 9176e18681cb0d34c5acc87bda224f5652af2ab8 | ≥ e284fc280473bed23f2e1ed324e102a48f7d17e1, < e490d8c5a54e0dd1ab22417d72c3a7319cf0f030 | ≥ e284fc280473bed23f2e1ed324e102a48f7d17e1, < 77a35be582dff4c80442ebcdce24d45eed8a6ce4 | ≥ e284fc280473bed23f2e1ed324e102a48f7d17e1, < 02aae5fcdd34c3a55a243d80a1b328a35852a35c | ≥ e284fc280473bed23f2e1ed324e102a48f7d17e1, < edecce7abd7152b48e279b4fa0a883d1839bb577 | ≥ e284fc280473bed23f2e1ed324e102a48f7d17e1, < d33e5d6631ac4fddda235a7815babc9d3f124299 | ≥ e284fc280473bed23f2e1ed324e102a48f7d17e1, < 8b13df5aa877b9e4541e301a58a84c42d84d2d9a | ≥ e284fc280473bed23f2e1ed324e102a48f7d17e1, < cb79fa7118c150c3c76a327894bb2eb878c02619 | 4.17
3 vendors · 145 products