In the Linux kernel, the following vulnerability has been resolved:
usbnet: ipheth: use static NDP16 location in URB
Original code allowed for the start of NDP16 to be anywhere within the URB based on the `wNdpIndex` value in NTH16. Only the start position of NDP16 was checked, so it was possible for even the fixed-length part of NDP16 to extend past the end of URB, leading to an out-of-bounds read.
On iOS devices, the NDP16 header always directly follows NTH16. Rely on and check for this specific format.
This, along with NCM-specific minimal URB length check that already exists, will ensure that the fixed-length part of NDP16 plus a set amount of DPEs fit within the URB.
Note that this commit alone does not fully address the OoB read. The limit on the amount of DPEs needs to be enforced separately.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel | Dec 3, 2025 | Feb 27, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | Feb 27, 2025 |
| Rocky_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade perfUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-devel-matchedUpgrade kernel-develUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modules-coreUpgrade kernel-toolsUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade libperfUpgrade kernel-rt-debug-develUpgrade kernel-uki-virt-addonsUpgrade rvUpgrade perf-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-s390xUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-rtUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-devel-matchedUpgrade libperf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfoUpgrade kernel-debug-modulesUpgrade rtlaUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-develUpgrade kernel-modules-extra-matchedUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-devel | Feb 5, 2026 | Nov 27, 2025 |
| Suse | — | Upgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade dtb-amazonUpgrade kernel-default-optionalUpgrade kernel-devel-azureUpgrade kernel-develUpgrade kernel-default-extraUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade kernel-symsUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade kernel-syms-azureUpgrade dtb-appleUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade kernel-devel-rtUpgrade dtb-hisiliconUpgrade dtb-armUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-freescaleUpgrade dtb-renesasUpgrade dtb-apmUpgrade kernel-macrosUpgrade ocfs2-kmp-azureUpgrade dtb-amdUpgrade kernel-default-develUpgrade dtb-socionextUpgrade cluster-md-kmp-azureUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade kernel-source-azureUpgrade kernel-debug-develUpgrade cluster-md-kmp-defaultUpgrade kernel-default-vdsoUpgrade dtb-mediatekUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-rockchipUpgrade kernel-default-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade dtb-alteraUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-rtUpgrade dtb-broadcomUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-sprdUpgrade dtb-caviumUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-default-baseUpgrade dtb-qcomUpgrade dtb-marvellUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kernel-azureUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-default-base-rebuild | Apr 9, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1028-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1029-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-64-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-64-genericUpgrade linux-image-gcp-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1029-oracle-64kUpgrade linux-image-6.8.0-1015-gkeopUpgrade linux-image-6.8.0-1031-nvidia-lowlatencyUpgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-64-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1031-oemUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-6.8.0-2026-raspi-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1031-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-azure-fde-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1033-gcp-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1031-raspiUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-azureUpgrade linux-image-raspi-6.8Upgrade linux-image-realtimeUpgrade linux-image-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-kvmUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.11.0-1022-oemUpgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-azure-nvidiaUpgrade linux-image-generic-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1034-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1031-nvidia-64kUpgrade linux-image-6.8.0-1029-ibmUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-6.8.0-1032-aws-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.1-1025-realtimeUpgrade linux-image-awsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-ibmUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1033-gcpUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-6.8.0-1032-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-6.8.0-1031-nvidiaUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04b | May 21, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub