CVE-2025-21743

Summary

CVE-2025-21743 is a vulnerability affecting the Linux kernel's usbnet driver. The issue involved a potential overflow in the DPE length check of the ipheth function. This could result in an out-of-bound (OoB) read, allowing attackers to access unintended data. The vulnerability was caused by a condition where wDatagramIndex + wDatagramLength might exceed U16_MAX. This issue has been resolved by moving the wDatagramIndex term to the other side of the inequality, ensuring that it remains below urb->actual_length, preventing the potential overflow and subsequent OoB read.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.