cbcvebase.
CVE-2025-21743
published 2025-02-27

CVE-2025-21743: In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: fix possible overflow in DPE length check Originally, it was possible for…

PriorityP430high7.1CVSS 3.1
AVLACLPRLUINSUCHINAH
EPSS
0.21%
11.7th percentile
In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: fix possible overflow in DPE length check Originally, it was possible for the DPE length check to overflow if wDatagramIndex + wDatagramLength > U16_MAX. This could lead to an OoB read. Move the wDatagramIndex term to the other side of the inequality. An existing condition ensures that wDatagramIndex actual_length.

Affected

14 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.12.15-1 (forky)linux 6.12.15-1 (forky)
linuxlinux
linuxlinux>= a2d274c62e44b1995c170595db3865c6fe701226 < 18bf6f5cce3172cb303c3f0551aa9443d5ed74f818bf6f5cce3172cb303c3f0551aa9443d5ed74f8
linuxlinux>= a2d274c62e44b1995c170595db3865c6fe701226 < d677e7dd59ad6837496f5a02d8e5d39824278dfdd677e7dd59ad6837496f5a02d8e5d39824278dfd
linuxlinux>= a2d274c62e44b1995c170595db3865c6fe701226 < d824a964185910e317287f034c0a439c08b4fe49d824a964185910e317287f034c0a439c08b4fe49
linuxlinux>= a2d274c62e44b1995c170595db3865c6fe701226 < c219427ed296f94bb4b91d08626776dc7719ee27c219427ed296f94bb4b91d08626776dc7719ee27
linuxlinux_kernel>= 0 < 6.12.15-16.12.15-1
linuxlinux_kernel>= 0 < 6.12.15-16.12.15-1
linuxlinux_kernel>= 0 < 6.8.0-64.676.8.0-64.67
linuxlinux_kernel>= 6.13 < 6.13.36.13.3
linuxlinux_kernel>= 6.5 < 6.6.786.6.78
linuxlinux_kernel>= 6.7 < 6.12.146.12.14
msrcazl3_kernel_6.6.64.2-9_on_azure_linux_3.0
msrcazl3_kernel_6.6.78.1-1_on_azure_linux_3.0

CVSS provenance

nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
osv7.8HIGH
vendor_ubuntu7.8HIGH
vendor_debian7.1LOW
vendor_msrc7.1HIGH
vendor_redhat7.1HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.