In the Linux kernel, the following vulnerability has been resolved:
usbnet: ipheth: use static NDP16 location in URB
Original code allowed for the start of NDP16 to be anywhere within the URB based on the `wNdpIndex` value in NTH16. Only the start position of NDP16 was checked, so it was possible for even the fixed-length part of NDP16 to extend past the end of URB, leading to an out-of-bounds read.
On iOS devices, the NDP16 header always directly follows NTH16. Rely on and check for this specific format.
This, along with NCM-specific minimal URB length check that already exists, will ensure that the fixed-length part of NDP16 plus a set amount of DPEs fit within the URB.
Note that this commit alone does not fully address the OoB read. The limit on the amount of DPEs needs to be enforced separately.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel | Dec 3, 2025 | Feb 27, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 9, 2025 | Feb 27, 2025 |
| Rocky_linux | — | Upgrade kernel-debug-uki-virtUpgrade kernel-tools-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-uki-virt-addonsUpgrade rvUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-rt-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-develUpgrade libperfUpgrade perf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade perfUpgrade kernel-modules-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-uki-virtUpgrade kernel-rt-debugUpgrade kernel-modules-extra-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade rtlaUpgrade kernel-debuginfo-common-x86_64Upgrade libperf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-coreUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade python3-perf-debuginfo | Feb 5, 2026 | Nov 27, 2025 |
| Suse | — | Upgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade kselftests-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-devel-rtUpgrade dtb-apmUpgrade kernel-sourceUpgrade kernel-develUpgrade dtb-freescaleUpgrade cluster-md-kmp-rtUpgrade dtb-renesasUpgrade kernel-debugUpgrade kernel-rt_debug-vdsoUpgrade dtb-amlogicUpgrade kernel-syms-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-exynosUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade kernel-default-vdsoUpgrade kernel-debug-develUpgrade dtb-armUpgrade ocfs2-kmp-azureUpgrade dtb-amdUpgrade kernel-rt_debugUpgrade dtb-mediatekUpgrade dtb-amazonUpgrade dtb-socionextUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade dtb-hisiliconUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade kernel-default-optionalUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-azure-develUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade kernel-rt-extraUpgrade kernel-azure-optionalUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade kernel-docsUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade kernel-rtUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-azure-vdsoUpgrade dtb-allwinnerUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade dtb-alteraUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade kernel-default-baseUpgrade dtb-marvellUpgrade kernel-defaultUpgrade kernel-source-rtUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-rt | Apr 9, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-6.8Upgrade linux-image-virtualUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-awsUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-azure-nvidiaUpgrade linux-image-azure-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-6.8.0-1032-aws-64kUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1032-awsUpgrade linux-image-6.8.0-1031-nvidia-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-ibmUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-6.8.0-1033-gcpUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-gke-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.1-1025-realtimeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1029-ibmUpgrade linux-image-kvmUpgrade linux-image-ibm-classicUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1031-nvidiaUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1031-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-6.8.0-1031-raspiUpgrade linux-image-6.8.0-64-lowlatency-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-aws-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1028-gkeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-azure-fde-6.8Upgrade linux-image-generic-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-64-genericUpgrade linux-image-6.8.0-1033-gcp-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-6.8.0-1031-oemUpgrade linux-image-realtimeUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-2026-raspi-realtimeUpgrade linux-image-6.8.0-1015-gkeopUpgrade linux-image-6.8.0-1029-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1031-nvidia-lowlatencyUpgrade linux-image-6.8.0-1029-oracle-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-64-lowlatencyUpgrade linux-image-realtime-6.8.1Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeop | May 21, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub