CVE - CVE-2025-38200

CVE-ID
CVE-2025-38200	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: i40e: fix MMIO write access to an invalid page in i40e_clear_hw When the device sends a specific input, an integer underflow can occur, leading to MMIO write access to an invalid page. Prevent the integer underflow by changing the type of related variables.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/015bac5daca978448f2671478c553ce1f300c21e URL:https://git.kernel.org/stable/c/015bac5daca978448f2671478c553ce1f300c21e MISC:https://git.kernel.org/stable/c/2a1f4f2e36442a9bdf771acf6ee86f3cf876e5ca URL:https://git.kernel.org/stable/c/2a1f4f2e36442a9bdf771acf6ee86f3cf876e5ca MISC:https://git.kernel.org/stable/c/3502dd42f178dae9d54696013386bb52b4f2e655 URL:https://git.kernel.org/stable/c/3502dd42f178dae9d54696013386bb52b4f2e655 MISC:https://git.kernel.org/stable/c/5e75c9082987479e647c75ec8fdf18fa68263c42 URL:https://git.kernel.org/stable/c/5e75c9082987479e647c75ec8fdf18fa68263c42 MISC:https://git.kernel.org/stable/c/872607632c658d3739e4e7889e4f3c419ae2c193 URL:https://git.kernel.org/stable/c/872607632c658d3739e4e7889e4f3c419ae2c193 MISC:https://git.kernel.org/stable/c/8cde755f56163281ec2c46b4ae8b61f532758a6f URL:https://git.kernel.org/stable/c/8cde755f56163281ec2c46b4ae8b61f532758a6f MISC:https://git.kernel.org/stable/c/d88a1e8f024ba26e19350958fecbf771a9960352 URL:https://git.kernel.org/stable/c/d88a1e8f024ba26e19350958fecbf771a9960352 MISC:https://git.kernel.org/stable/c/fecb2fc3fc10c95724407cc45ea35af4a65cdde2 URL:https://git.kernel.org/stable/c/fecb2fc3fc10c95724407cc45ea35af4a65cdde2
Assigning CNA
kernel.org
Date Record Created
20250416	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250416)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)

Use of the CVE™ List and the associated references from this website are subject to the terms of use. CVE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA). Copyright © 1999–2025, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.