CVE-2025-21741: usbnet: ipheth: fix DPE OoB read
Published Feb 27, 2025
·Updated
In the Linux kernel, the following vulnerability has been resolved:
usbnet: ipheth: fix DPE OoB read
Fix an out-of-bounds DPE read, limit the number of processed DPEs to the amount that fits into the fixed-size NDP16 header.
Affected Software
6 affected componentsFixes available
Linux Linux kernel
Linux Linux kernel>=6.5<6.6.78
Linux Linux kernel>=6.7<6.12.14
Linux Linux kernel>=6.13<6.13.3
Microsoft azl3 kernel 6.6.78.1-1
Microsoft azl3 kernel 6.6.64.2-9
Event History
Feb 27, 2025
CVE Published
via MITRE·02:12 AM
Data Sourced
via MITRE·02:12 AM
Description
Data Sourced
via Red Hat·03:05 AM
DescriptionSeverityAffected Software
Data Sourced
via NVD·03:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Mar 14, 2025
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·07:00 AM
Affected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-21741?
CVE-2025-21741 is classified as a medium-severity vulnerability affecting the Linux kernel.
2
How do I fix CVE-2025-21741?
To fix CVE-2025-21741, update your Linux kernel to the latest version that contains the security patch.
3
Which versions of the Linux kernel are affected by CVE-2025-21741?
CVE-2025-21741 affects specific versions of the Linux kernel that utilize the usbnet driver.
4
What is the nature of the vulnerability in CVE-2025-21741?
CVE-2025-21741 involves an out-of-bounds read vulnerability in the ipheth driver, leading to potential information disclosure.
5
Is CVE-2025-21741 being actively exploited?
As of now, there are no public reports indicating that CVE-2025-21741 is being actively exploited in the wild.