CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.1. It affects Linux.
CVE
CVE-2025-21743
Severity
HIGH
CVSS
7.1
EPSS
0.21%
Linux
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: fix possible overflow in DPE length check Originally, it was possible for the DPE length check to overflow if wDatagramIndex + wDatagramLength > U16_MAX. This could lead to an OoB read. Move the wDatagramIndex term to the other side of the inequality. An existing condition ensures that wDatagramIndex < urb->actual_length.
Related CVEs
Other vulnerabilities affecting the same vendor(s)