CVE-2025-2073

Опубликовано: 16 апр. 2025

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

Out-of-Bounds Read in netfilter/ipset in Linux Kernel ChromeOS [6.1, 5.15, 5.10, 5.4, 4.19] allows a local attacker with low privileges to trigger an out-of-bounds read, potentially leading to information disclosure

Ссылки

https://issues.chromium.org/issues/b/380043638
Broken Link
https://issuetracker.google.com/issues/380043638
Exploit
Issue Tracking
Mailing List

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:google:chrome_os:16093.103.0:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:linux:linux_kernel:4.19:-:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:5.10:-:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:5.15:-:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.1:-:*:*:*:*:*:*

EPSS

Процентиль: 12%

0.00042

Низкий

8.8 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

GHSA-pv63-22w8-6xj8

CVSS3: 9.1

github

10 месяцев назад

Out-of-Bounds Read in ip_set_bitmap_ip.c in Google ChromeOS Kernel Versions 6.1, 5.15, 5.10, 5.4, 4.19. on All devices where Termina is used allows an attacker with CAP_NET_ADMIN privileges to cause memory corruption and potentially escalate privileges via crafted ipset commands.

BDU:2025-05272