CVE-2026-74677

A flaw was found in the Linux kernel's ipheth USB network driver. This vulnerability allows a local attacker with root privileges, using a specially crafted USB device, to trigger a Use-After-Free UAF condition. This occurs when the carrierwork mechanism attempts to access memory that has already...

EUVD-2026-64364

In the Linux kernel, the following vulnerability has been resolved: net: usb: ipheth: fix carrierwork UAF on disconnect iphethsndbulkcallback re-arms the carrier-check work on any non-zero URB status: else scheduledelayedwork&dev-carrierwork, 0; Nothing ties that to the interface being up, so the...

CVE-2026-74677

CVE-2026-74677 is a use-after-free in the Linux kernel's ipheth USB network driver. The root cause is that ipheth_sndbulk_callback() re-arms the carrier_work delayed work on any non-zero URB status without checking whether the interface is still up. After ipheth_close() drains the work, a late UR...

CVE-2026-74677 net: usb: ipheth: fix carrier_work UAF on disconnect

In the Linux kernel, the following vulnerability has been resolved: net: usb: ipheth: fix carrierwork UAF on disconnect iphethsndbulkcallback re-arms the carrier-check work on any non-zero URB status: else scheduledelayedwork&dev-carrierwork, 0; Nothing ties that to the interface being up, so the...

usbnet: ipheth: fix DPE OoB read

...

usbnet: ipheth: use static NDP16 location in URB

...

UBUNTU-CVE-2025-21742

In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: use static NDP16 location in URB Original code allowed for the start of NDP16 to be anywhere within the URB based on the wNdpIndex value in NTH16. Only the start position of NDP16 was checked, so it was possible f...

CVE-2025-21741

In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: fix DPE OoB read Fix an out-of-bounds DPE read, limit the number of processed DPEs to the amount that fits into the fixed-size NDP16 header...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a possible overflow in the DPE length check in the ipheth driver, resulting in an out-of-bounds read...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a DPE out-of-bounds read issue in the ipheth driver...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unfixed NDP16 location in the ipheth driver, which could lead to out-of-bounds reads...