CVE-2025-71087 | Linux Kernel up to 6.1.159/6.6.119/6.12.63/6.18.3/6.19-rc3 iavf iavf_config_rss_reg out-of-bounds

A vulnerability was found in Linux Kernel up to 6.1.159/6.6.119/6.12.63/6.18.3/6.19-rc3. It has been declared as critical. Affected by this vulnerability is the function iavf_config_rss_reg of the component iavf. The manipulation results in out-of-bounds read.

This vulnerability is identified as CVE-2025-71087. The attack can only be performed from the local network. There is not any exploit available.

It is recommended to upgrade the affected component.