A small but important Linux kernel networking bug — tracked as CVE‑2025‑40252 — was fixed upstream after a static-analysis finding showed a potential out‑of‑bounds read in the QLogic QEDE driver. The vulnerable code lived in two packet-aggregation helper routines, qede_tpa_cont and qede_tpa_end...