VYPR
High severity7.1NVD Advisory· Published Feb 27, 2025· Updated Jun 17, 2026

CVE-2025-21743

CVE-2025-21743

Description

In the Linux kernel, the following vulnerability has been resolved:

usbnet: ipheth: fix possible overflow in DPE length check

Originally, it was possible for the DPE length check to overflow if wDatagramIndex + wDatagramLength > U16_MAX. This could lead to an OoB read.

Move the wDatagramIndex term to the other side of the inequality.

An existing condition ensures that wDatagramIndex < urb->actual_length.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

141

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.