In the Linux kernel, the following vulnerability has been resolved:
usbnet: ipheth: use static NDP16 location in URB
Original code allowed for the start of NDP16 to be anywhere within the URB based on the `wNdpIndex` value in NTH16. Only the start position of NDP16 was checked, so it was possible for even the fixed-length part of NDP16 to extend past the end of URB, leading to an out-of-bounds read.
On iOS devices, the NDP16 header always directly follows NTH16. Rely on and check for this specific format.
This, along with NCM-specific minimal URB length check that already exists, will ensure that the fixed-length part of NDP16 plus a set amount of DPEs fit within the URB.
Note that this commit alone does not fully address the OoB read. The limit on the amount of DPEs needs to be enforced separately.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel | Dec 3, 2025 | Feb 27, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | Feb 27, 2025 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-coreUpgrade kernel-modules-coreUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-modulesUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-s390xUpgrade kernel-uki-virt-addonsUpgrade rvUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debug-devel-matchedUpgrade libperfUpgrade kernel-modules-extra-matchedUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-coreUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools-libs-develUpgrade rtlaUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-develUpgrade kernel-debug-modules-core | Feb 5, 2026 | Nov 27, 2025 |
| Suse | — | Upgrade kernel-rt-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-develUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade kernel-source-rtUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-default-baseUpgrade kernel-docs-htmlUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-caviumUpgrade kernel-default-livepatch-develUpgrade dtb-broadcomUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-default-base-rebuildUpgrade dtb-marvellUpgrade kselftests-kmp-rtUpgrade dtb-alteraUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade kernel-defaultUpgrade dtb-sprdUpgrade kernel-rtUpgrade kernel-azure-vdsoUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmallUpgrade kernel-azure-extraUpgrade dtb-armUpgrade kernel-default-optionalUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-syms-rtUpgrade dlm-kmp-64kbUpgrade kernel-64kbUpgrade kernel-debugUpgrade dtb-freescaleUpgrade kernel-rt_debug-vdsoUpgrade dtb-renesasUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kernel-default-vdsoUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade dtb-amdUpgrade cluster-md-kmp-azureUpgrade dtb-appleUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade kernel-debug-develUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade kernel-sourceUpgrade dtb-amlogicUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azure | Apr 9, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1033-gcpUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-awsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-6.8Upgrade linux-image-ibmUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1032-awsUpgrade linux-image-aws-64kUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-oem-24.04bUpgrade linux-image-ibm-classicUpgrade linux-image-raspi-realtimeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1034-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1029-ibmUpgrade linux-image-6.8.0-1031-nvidia-64kUpgrade linux-image-6.8.0-1032-aws-64kUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.11.0-1015-azureUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-azure-nvidiaUpgrade linux-image-ibm-6.8Upgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.11.0-1022-oemUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-6.8.1-1025-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-kvmUpgrade linux-image-oem-22.04aUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1031-nvidiaUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-64-lowlatency-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-64-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1031-nvidia-lowlatencyUpgrade linux-image-6.8.0-1015-gkeopUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-genericUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-6.8.0-1031-oemUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1028-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-azureUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1033-gcp-64kUpgrade linux-image-raspiUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1029-oracle-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1031-nvidia-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-2026-raspi-realtimeUpgrade linux-image-6.8.0-1029-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-azure-fde-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1031-raspi | May 21, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub