In the Linux kernel, the following vulnerability has been resolved:
i40e: Fix potential invalid access when MAC list is empty
listfirstentry() never returns NULL - if the list is empty, it still returns a pointer to an invalid object, leading to potential invalid memory access when dereferenced.
Fix this by using listfirstentryornull instead of listfirstentry.
[
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "297643564171868856862127084298870708764",
"length": 1566.0
},
"target": {
"function": "i40e_client_add_instance",
"file": "drivers/net/ethernet/intel/i40e/i40e_client.c"
},
"id": "CVE-2025-39853-26efc9a9",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fb216d980fae6561c7c70af8ef826faf059c6515",
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"279821529613089239061965636526683940905",
"325249708922239604886171480249460652271",
"17488916821903815361804847625713879178",
"78102784996674523602421470781228704926",
"310620048467230556740567643297418964696"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/ethernet/intel/i40e/i40e_client.c"
},
"id": "CVE-2025-39853-3aaa9ecd",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fb216d980fae6561c7c70af8ef826faf059c6515",
"signature_type": "Line"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"279821529613089239061965636526683940905",
"325249708922239604886171480249460652271",
"17488916821903815361804847625713879178",
"78102784996674523602421470781228704926",
"310620048467230556740567643297418964696"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/ethernet/intel/i40e/i40e_client.c"
},
"id": "CVE-2025-39853-3efe77da",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1eadabcf5623f1237a539b16586b4ed8ac8dffcd",
"signature_type": "Line"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"279821529613089239061965636526683940905",
"325249708922239604886171480249460652271",
"17488916821903815361804847625713879178",
"78102784996674523602421470781228704926",
"310620048467230556740567643297418964696"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/ethernet/intel/i40e/i40e_client.c"
},
"id": "CVE-2025-39853-44f1c2f2",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a556f06338e1d5a85af0e32ecb46e365547f92b9",
"signature_type": "Line"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "297643564171868856862127084298870708764",
"length": 1566.0
},
"target": {
"function": "i40e_client_add_instance",
"file": "drivers/net/ethernet/intel/i40e/i40e_client.c"
},
"id": "CVE-2025-39853-5ab52922",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1eadabcf5623f1237a539b16586b4ed8ac8dffcd",
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"279821529613089239061965636526683940905",
"325249708922239604886171480249460652271",
"17488916821903815361804847625713879178",
"78102784996674523602421470781228704926",
"310620048467230556740567643297418964696"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/ethernet/intel/i40e/i40e_client.c"
},
"id": "CVE-2025-39853-68127c4f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66e7cdbda74ee823ec2bf7b830ebd235c54f5ddf",
"signature_type": "Line"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "200505376667733688868215547665989073185",
"length": 1551.0
},
"target": {
"function": "i40e_client_add_instance",
"file": "drivers/net/ethernet/intel/i40e/i40e_client.c"
},
"id": "CVE-2025-39853-85ef945c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a556f06338e1d5a85af0e32ecb46e365547f92b9",
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "297643564171868856862127084298870708764",
"length": 1566.0
},
"target": {
"function": "i40e_client_add_instance",
"file": "drivers/net/ethernet/intel/i40e/i40e_client.c"
},
"id": "CVE-2025-39853-9403d84d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e2a5e74879f9b494bbd66fa93f355feacde450c7",
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "200505376667733688868215547665989073185",
"length": 1551.0
},
"target": {
"function": "i40e_client_add_instance",
"file": "drivers/net/ethernet/intel/i40e/i40e_client.c"
},
"id": "CVE-2025-39853-9e605bda",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@66e7cdbda74ee823ec2bf7b830ebd235c54f5ddf",
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "73378755264859168418369381620931193542",
"length": 1429.0
},
"target": {
"function": "i40e_client_add_instance",
"file": "drivers/net/ethernet/intel/i40e/i40e_client.c"
},
"id": "CVE-2025-39853-a9f9ec3b",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@971feafe157afac443027acdc235badc6838560b",
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"222382872504180002965733344064770999067",
"105318719595129610774960954450299972045",
"110598436394687020012492970516620389594",
"78102784996674523602421470781228704926",
"310620048467230556740567643297418964696"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/ethernet/intel/i40e/i40e_client.c"
},
"id": "CVE-2025-39853-ac6dad9a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@971feafe157afac443027acdc235badc6838560b",
"signature_type": "Line"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"279821529613089239061965636526683940905",
"325249708922239604886171480249460652271",
"17488916821903815361804847625713879178",
"78102784996674523602421470781228704926",
"310620048467230556740567643297418964696"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/ethernet/intel/i40e/i40e_client.c"
},
"id": "CVE-2025-39853-cad60ac1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e2a5e74879f9b494bbd66fa93f355feacde450c7",
"signature_type": "Line"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"function_hash": "73378755264859168418369381620931193542",
"length": 1429.0
},
"target": {
"function": "i40e_client_add_instance",
"file": "drivers/net/ethernet/intel/i40e/i40e_client.c"
},
"id": "CVE-2025-39853-e9dde4ea",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c6fb929afa313d9d11f780451d113f73922fe5d",
"signature_type": "Function"
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"line_hashes": [
"222382872504180002965733344064770999067",
"105318719595129610774960954450299972045",
"110598436394687020012492970516620389594",
"78102784996674523602421470781228704926",
"310620048467230556740567643297418964696"
],
"threshold": 0.9
},
"target": {
"file": "drivers/net/ethernet/intel/i40e/i40e_client.c"
},
"id": "CVE-2025-39853-fd4a0520",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c6fb929afa313d9d11f780451d113f73922fe5d",
"signature_type": "Line"
}
]