Out-of-Bounds Read Vulnerability in Linux Kernel USB Networking Component

CVE-2025-21743

Summary

A vulnerability exists in the USB networking component of the Linux kernel, specifically in the ipheth driver, where improper handling of the datagram index and length could result in an out-of-bounds (OoB) read. This issue arises if the sum of the datagram index and length exceeds the maximum value for a 16-bit unsigned integer. To mitigate the risk, appropriate checks have been implemented ensuring that the datagram index remains within safe limits relative to the actual length of the USB request.

References