In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only state in which VF is actually active so it should not be used to determine if a VF is allowed to obtain resources. Use I40EVFSTATERESOURCESLOADED that is set only in i40evcgetvfresourcesmsg() and cleared during reset.