Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2025-21741 Details

Description

In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: fix DPE OoB read Fix an out-of-bounds DPE read, limit the number of processed DPEs to the amount that fits into the fixed-size NDP16 header.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.1 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CNA: CISA-ADPCVSS-B:7.1 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/22475242ddb70e35c9148234be9a3aa9fb8efff9 kernel.orgPatch
https://git.kernel.org/stable/c/5835bf66c50ac2b85ed28b282c2456c3516ef0a6 kernel.orgPatch
https://git.kernel.org/stable/c/971b8c572559e52d32a2b82f2d9e0685439a0117 kernel.orgPatch
https://git.kernel.org/stable/c/ee591f2b281721171896117f9946fced31441418 kernel.orgPatch

Weakness Enumeration

CWE-IDCWE NameSource
CWE-125Out-of-bounds Read[email protected]
CWE-125Out-of-bounds ReadCISA-ADP

Affected Products

ProductVersions
linux linux kernel
>= 6.5, < 6.6.78
>= 6.7, < 6.12.14
>= 6.13, < 6.13.3

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

5 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2025-21741
NVD Published Date:
Feb 27, 2025
NVD Last Modified:
Jun 17, 2026
Source:
kernel.org
CVE-2025-21741 Details - Not Deferred