CVE-2025-21743 | BDVDB-2026-268482 Detail

Description#

In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: fix possible overflow in DPE length check Originally, it was possible for the DPE length check to overflow if wDatagramIndex + wDatagramLength > U16_MAX. This could lead to an OoB read. Move the wDatagramIndex term to the other side of the inequality. An existing condition ensures that wDatagramIndex < urb->actual_length.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-02-27Record published in the CVE List.
2. Version 22026-05-11Most recent update recorded in the CVE List.