CVE-2025-71087

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
13/01/2026
Last modified:
14/01/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> iavf: fix off-by-one issues in iavf_config_rss_reg()<br /> <br /> There are off-by-one bugs when configuring RSS hash key and lookup<br /> table, causing out-of-bounds reads to memory [1] and out-of-bounds<br /> writes to device registers.<br /> <br /> Before commit 43a3d9ba34c9 ("i40evf: Allow PF driver to configure RSS"),<br /> the loop upper bounds were:<br /> i

Impact