CVE-2025-21741 usbnet: ipheth: fix DPE OoB read

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Addressed in usbnet: ipheth Vulnerabilities Three vulnerabilities in the usbnet: ipheth driver have been reported, identified as CVE-2025-21741, CVE-2025-21742, and CVE-2025-21743. These issues include an out-of-bounds read, a potential overflow in the DPE length check, and a static NDP16 location usage in URB. All vulnerabilities were published on February 27, 2025. 3 sources 39