CVE-2025-21741
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Feb 27, 2025
Updated: Mar 6, 2025
CWE ID 125
Summary
CVE-2025-21741 is a recently identified vulnerability affecting the Linux kernel. This issue, specifically within the usbnet and ipheth components, involves an out-of-bounds data-packed ethernet (DPE) read. The vulnerability could potentially result in a buffer overflow, posing a security risk. To mitigate this, the fixed number of processed DPEs has been limited to accommodate the capacity of the NDP16 header. By implementing this solution, the Linux kernel now effectively restricts the impact of such an out-of-bounds read.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX