CVE-2025-38200

i40e: fix MMIO write access to an invalid page in i40e_clear_hw

Severity Score

7.1

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

In the Linux kernel, the following vulnerability has been resolved: i40e: fix MMIO write access to an invalid page in i40e_clear_hw When the device sends a specific input, an integer underflow can occur, leading
to MMIO write access to an invalid page. Prevent the integer underflow by changing the type of related variables.

In the Linux kernel, the following vulnerability has been resolved: i40e: fix MMIO write access to an invalid page in i40e_clear_hw When the device sends a specific input, an integer underflow can occur, leading to MMIO write access to an invalid page. Prevent the integer underflow by changing the type of related variables.

*Credits: N/A

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2025-04-16 CVE Reserved
2025-07-04 CVE Published
2025-07-04 CVE Updated
2025-07-05 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (8)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC
https://git.kernel.org/stable/c/872607632c658d3739e4e7889e4f3c419ae2c193	2025-06-27
https://git.kernel.org/stable/c/5e75c9082987479e647c75ec8fdf18fa68263c42	2025-06-27
https://git.kernel.org/stable/c/fecb2fc3fc10c95724407cc45ea35af4a65cdde2	2025-06-27
https://git.kernel.org/stable/c/d88a1e8f024ba26e19350958fecbf771a9960352	2025-06-27
https://git.kernel.org/stable/c/8cde755f56163281ec2c46b4ae8b61f532758a6f	2025-06-27
https://git.kernel.org/stable/c/3502dd42f178dae9d54696013386bb52b4f2e655	2025-06-27
https://git.kernel.org/stable/c/2a1f4f2e36442a9bdf771acf6ee86f3cf876e5ca	2025-06-27
https://git.kernel.org/stable/c/015bac5daca978448f2671478c553ce1f300c21e	2025-04-11

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 5.4.295 Search vendor "Linux" for product "Linux Kernel" and version " < 5.4.295"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 5.10.239 Search vendor "Linux" for product "Linux Kernel" and version " < 5.10.239"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 5.15.186 Search vendor "Linux" for product "Linux Kernel" and version " < 5.15.186"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 6.1.142 Search vendor "Linux" for product "Linux Kernel" and version " < 6.1.142"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 6.6.95 Search vendor "Linux" for product "Linux Kernel" and version " < 6.6.95"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 6.12.35 Search vendor "Linux" for product "Linux Kernel" and version " < 6.12.35"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 6.15.4 Search vendor "Linux" for product "Linux Kernel" and version " < 6.15.4"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 6.16-rc1 Search vendor "Linux" for product "Linux Kernel" and version " < 6.16-rc1"		en		Affected