CVE-2025-2073

HIGH EPSS 11.8%

Published Apr 16, 20251y ago · Modified Jun 17, 20262w ago

8.8 CVSS 3.1

High

Published Apr 16, 2025 1y ago

Last Modified Jun 17, 2026 2w ago

Description

Out-of-Bounds Read in netfilter/ipset in Linux Kernel ChromeOS [6.1, 5.15, 5.10, 5.4, 4.19] allows a local attacker with low privileges to trigger an out-of-bounds read, potentially leading to information disclosure

CVSS Details

Base Score

8.8

Exploitability

2.8

Impact

5.9

Vector string

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector Network

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Unchanged

Confidentiality High

Integrity High

Availability High

Threat Intelligence

EPSS Exploit Probability

11.8% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-125 Out-of-bounds Read Memory Safety

Affected Products 5

Vendor	Product	Version	Range
google	chrome_os	16093.103.0	any
linux	linux_kernel	4.19	any
linux	linux_kernel	5.10	any
linux	linux_kernel	5.15	any
linux	linux_kernel	6.1	any

References 2

issues.chromium.org https://issues.chromium.org/issues/b/380043638

Broken Link
issuetracker.google.com https://issuetracker.google.com/issues/380043638

ExploitIssue TrackingMailing List

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.