Out-of-Bounds Read Vulnerability in Google ChromeOS Kernel

CVE-2025-2073

Summary

A vulnerability exists in the Google ChromeOS Kernel that enables an out-of-bounds read condition within the ip_set_bitmap_ip.c file. This flaw affects multiple kernel versions and can be exploited by an attacker with CAP_NET_ADMIN privileges, allowing for memory corruption through specially crafted ipset commands. Successful exploitation could result in privilege escalation, posing significant security risks across affected devices utilizing Termina.

References