Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2025-21743

usbnet: ipheth: fix possible overflow in DPE length check

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: fix possible overflow in DPE length check Originally, it was possible for the DPE length check to overflow if wDatagramIndex + wDatagramLength > U16_MAX. This could lead to an OoB read. Move the wDatagramIndex term to the other side of the inequality. An existing condition ensures that wDatagramIndex < urb->actual_length.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a2d274c62e44b1995c170595db3865c6fe701226 to < 18bf6f5cce3172cb303c3f0551aa9443d5ed74f8affected
  • a2d274c62e44b1995c170595db3865c6fe701226 to < d677e7dd59ad6837496f5a02d8e5d39824278dfdaffected
  • a2d274c62e44b1995c170595db3865c6fe701226 to < d824a964185910e317287f034c0a439c08b4fe49affected
  • a2d274c62e44b1995c170595db3865c6fe701226 to < c219427ed296f94bb4b91d08626776dc7719ee27affected

Linux Linux

Default version status: affected

  • 6.5affected
  • 0 to < 6.5unaffected
  • 6.6.78 to ≤ 6.6.*unaffected
  • 6.12.14 to ≤ 6.12.*unaffected
  • 6.13.3 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References