High severity8.8NVD Advisory· Published Apr 16, 2025· Updated Jun 17, 2026

CVE-2025-2073

Description

Out-of-Bounds Read in netfilter/ipset in Linux Kernel ChromeOS [6.1, 5.15, 5.10, 5.4, 4.19] allows a local attacker with low privileges to trigger an out-of-bounds read, potentially leading to information disclosure

Affected products

Linux/netfilter/ipsetllm-create
Range: 6.1, 5.15, 5.10, 5.4, 4.19
Google/Chromecpe-rescue
Range: Kernal version 6.1, 5.15. 5.10, 4.19 chromeOS version 16093.103.0
Google/ChromeOS
cpe:2.3:o:google:chrome_os:16093.103.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

issuetracker.google.com/issues/380043638nvdExploitIssue TrackingMailing List
issues.chromium.org/issues/b/380043638nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000