CVE-2025-2073

CVE-2025-2073 affects Google ChromeOS Kernel via an Out-of-Bounds Read in netfilter/ipset. PT-2025-16922 details the root cause in ip_set_bitmap_ip.c and lists affected ChromeOS Kernel versions 4.19, 5.4, 5.10, 5.15, and 6.1. The issue can let a user with CAP NET_ADMIN privileges cause memory cor...