CVE-2025-38200 i40e: fix MMIO write access to an invalid page in i40e_clear_hw

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Address MMIO Vulnerabilities in i40e and amdkfd Two vulnerabilities have been reported affecting MMIO access in different components. CVE-2025-38200, published on July 4, 2025, addresses an invalid page access in i40e, while CVE-2024-41011, published on July 18, 2024, prevents mapping the MMIO HDP page with large pages in drm/amdkfd. Both vulnerabilities have been acknowledged in recent publications. 2 sources 39