Description
In the Linux kernel, the following vulnerability has been resolved: i40e: fix MMIO write access to an invalid page in i40e_clear_hw When the device sends a specific input, an integer underflow can occur, leading to MMIO write access to an invalid page. Prevent the integer underflow by changing the type of related variables.
Product status
1bff652941c4d94f97610c9a30473aad6f5b2fff (git) before 872607632c658d3739e4e7889e4f3c419ae2c193
1bff652941c4d94f97610c9a30473aad6f5b2fff (git) before 5e75c9082987479e647c75ec8fdf18fa68263c42
1bff652941c4d94f97610c9a30473aad6f5b2fff (git) before fecb2fc3fc10c95724407cc45ea35af4a65cdde2
1bff652941c4d94f97610c9a30473aad6f5b2fff (git) before d88a1e8f024ba26e19350958fecbf771a9960352
1bff652941c4d94f97610c9a30473aad6f5b2fff (git) before 8cde755f56163281ec2c46b4ae8b61f532758a6f
1bff652941c4d94f97610c9a30473aad6f5b2fff (git) before 3502dd42f178dae9d54696013386bb52b4f2e655
1bff652941c4d94f97610c9a30473aad6f5b2fff (git) before 2a1f4f2e36442a9bdf771acf6ee86f3cf876e5ca
1bff652941c4d94f97610c9a30473aad6f5b2fff (git) before 015bac5daca978448f2671478c553ce1f300c21e
3.12
Any version before 3.12
5.4.295 (semver)
5.10.239 (semver)
5.15.186 (semver)
6.1.142 (semver)
6.6.95 (semver)
6.12.35 (semver)
6.15.4 (semver)
6.16 (original_commit_for_fix)
References
lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.org/debian-lts-announce/2025/10/msg00007.html
git.kernel.org/...c/872607632c658d3739e4e7889e4f3c419ae2c193
git.kernel.org/...c/5e75c9082987479e647c75ec8fdf18fa68263c42
git.kernel.org/...c/fecb2fc3fc10c95724407cc45ea35af4a65cdde2
git.kernel.org/...c/d88a1e8f024ba26e19350958fecbf771a9960352
git.kernel.org/...c/8cde755f56163281ec2c46b4ae8b61f532758a6f
git.kernel.org/...c/3502dd42f178dae9d54696013386bb52b4f2e655
git.kernel.org/...c/2a1f4f2e36442a9bdf771acf6ee86f3cf876e5ca
git.kernel.org/...c/015bac5daca978448f2671478c553ce1f300c21e