CVE-2025-39853

Updated: 2026-02-14 05:12:02.505584

Description:

In the Linux kernel, the following vulnerability has been resolved: i40e: Fix potential invalid access when MAC list is empty list_first_entry() never returns NULL - if the list is empty, it still returns a pointer to an invalid object, leading to potential invalid memory access when dereferenced. Fix this by using list_first_entry_or_null instead of list_first_entry.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x HIGH 7.1

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 7.1 HIGH In Progress 2026-02-06 09:01:16
CentOS 8.4 ELS kernel 4.18.0 7.1 HIGH Released CLSA-2026:1771078945 2026-02-14 20:11:53
CentOS 8.5 ELS kernel 4.18.0 7.1 HIGH Released CLSA-2026:1771077729 2026-02-14 20:11:54
CentOS Stream 8 ELS kernel 4.18.0 7.1 HIGH In Progress 2026-02-06 09:01:15
Oracle Linux 7 ELS kernel 3.10.0 7.1 HIGH Needs Triage 2026-02-04 20:43:49
Oracle Linux 7 ELS kernel-uek 5.4.17 7.1 HIGH Already Fixed 2026-02-06 10:08:26
TuxCare 9.6 ESU kernel 5.14.0 7.1 HIGH Released CLSA-2026:1771081379 2026-02-14 20:11:52
Ubuntu 16.04 ELS linux-hwe 4.15.0 7.1 HIGH Needs Triage 2026-02-04 08:50:04
Ubuntu 18.04 ELS linux 4.15.0 7.1 HIGH Needs Triage 2026-02-04 09:02:03
Ubuntu 20.04 ELS linux 5.4.0 7.1 HIGH In Testing 2026-02-05 13:17:43