CVE-2025-39970 | Linux Kernel up to 6.16.9 i40e action_meta null pointer dereference

October 15, 2025 Yanac

A vulnerability was found in Linux Kernel up to 6.16.9. It has been classified as critical. Impacted is the function action_meta of the component i40e. Performing manipulation results in null pointer dereference.

This vulnerability is identified as CVE-2025-39970. The attack can only be performed from the local network. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More