QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2025-39853

Back to search

CVE-2025-39853

Published: Sep 19, 2025

Modified: May 12, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: i40e: Fix potential invalid access when MAC list is empty list_first_entry() never returns NULL - if the list is empty, it still returns a pointer to an invalid object, leading to potential invalid memory access when dereferenced. Fix this by using list_first_entry_or_null instead of list_first_entry.

VendorProductVersions

Linux

Linux

affected
e3219ce6a775468368fb270fae3eb82a6787b436 - < 971feafe157afac443027acdc235badc6838560b
affected
e3219ce6a775468368fb270fae3eb82a6787b436 - < 3c6fb929afa313d9d11f780451d113f73922fe5d
affected
e3219ce6a775468368fb270fae3eb82a6787b436 - < 1eadabcf5623f1237a539b16586b4ed8ac8dffcd
affected
e3219ce6a775468368fb270fae3eb82a6787b436 - < e2a5e74879f9b494bbd66fa93f355feacde450c7
affected
e3219ce6a775468368fb270fae3eb82a6787b436 - < fb216d980fae6561c7c70af8ef826faf059c6515

+3 more versions

Linux

Linux

affected
4.6
unaffected
0 - < 4.6
unaffected
5.4.299 - <= 5.4.*
unaffected
5.10.243 - <= 5.10.*
unaffected
5.15.192 - <= 5.15.*

+5 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now