In the Linux kernel, the following vulnerability has been resolved:
usbnet: ipheth: use static NDP16 location in URB
Original code allowed for the start of NDP16 to be anywhere within the URB based on the `wNdpIndex` value in NTH16. Only the start position of NDP16 was checked, so it was possible for even the fixed-length part of NDP16 to extend past the end of URB, leading to an out-of-bounds read.
On iOS devices, the NDP16 header always directly follows NTH16. Rely on and check for this specific format.
This, along with NCM-specific minimal URB length check that already exists, will ensure that the fixed-length part of NDP16 plus a set amount of DPEs fit within the URB.
Note that this commit alone does not fully address the OoB read. The limit on the amount of DPEs needs to be enforced separately.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel | Dec 3, 2025 | Feb 27, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 9, 2025 | Feb 27, 2025 |
| Rocky_linux | — | Upgrade kernel-debuginfoUpgrade libperf-debuginfoUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-coreUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade rtlaUpgrade kernel-debug-coreUpgrade kernel-modules-coreUpgrade kernel-debugUpgrade kernel-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-devel-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-debuginfo-common-s390xUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-develUpgrade rvUpgrade kernel-develUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade perfUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade libperfUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-debug-devel-matched | Feb 5, 2026 | Nov 27, 2025 |
| Suse | — | Upgrade kernel-default-vdsoUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatchUpgrade kernel-kvmsmallUpgrade dtb-amazonUpgrade kernel-64kbUpgrade kernel-devel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade dtb-armUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-syms-rtUpgrade dtb-lgUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-source-azureUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-rt-develUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-default-optionalUpgrade kernel-devel-azureUpgrade dlm-kmp-azureUpgrade kernel-syms-azureUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade dtb-freescaleUpgrade kernel-develUpgrade dtb-mediatekUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade ocfs2-kmp-azureUpgrade dtb-socionextUpgrade cluster-md-kmp-azureUpgrade kernel-debugUpgrade cluster-md-kmp-rtUpgrade dtb-amlogicUpgrade dtb-amdUpgrade dtb-appleUpgrade kernel-64kb-develUpgrade kernel-rt_debugUpgrade kernel-rt_debug-vdsoUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-azure-optionalUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-develUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-rt-optionalUpgrade dtb-qcomUpgrade kernel-obs-buildUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-rtUpgrade dtb-broadcomUpgrade dtb-sprdUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade dtb-marvellUpgrade dtb-caviumUpgrade kernel-default-baseUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade ocfs2-kmp-64kbUpgrade kernel-rtUpgrade kselftests-kmp-rtUpgrade dtb-nvidiaUpgrade dtb-alteraUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade kernel-rt-vdsoUpgrade kernel-source-rt | Apr 9, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-ibm-6.8Upgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.1-1025-realtimeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.11.0-1022-oemUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtualUpgrade linux-image-ibm-classicUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-azure-nvidiaUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1031-nvidiaUpgrade linux-image-oem-6.8Upgrade linux-image-6.11.0-1015-azureUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-awsUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-6.8.0-1032-awsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.11.0-1014-awsUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-gcp-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-aws-64kUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1033-gcpUpgrade linux-image-6.8.0-1032-aws-64kUpgrade linux-image-6.8.0-1031-nvidia-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1029-ibmUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-azure-6.8Upgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-generic-6.8Upgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1031-nvidia-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1031-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-64-lowlatencyUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1029-oracle-64kUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1028-gkeUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1015-gkeopUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-virtual-6.8Upgrade linux-image-azureUpgrade linux-image-6.8.0-2026-raspi-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1029-oracleUpgrade linux-image-6.8.0-1033-gcp-64kUpgrade linux-image-oem-22.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1031-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1031-oemUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-64-genericUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-64-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-oracle-6.8 | May 21, 2025 | Feb 27, 2025 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub