CVE-2025-2073

HIGH 8.8EPSS 0.2%

Out-of-Bounds Read in netfilter/ipset in Linux Kernel ChromeOS [6.1, 5.15, 5.10, 5.4, 4.19] allows a local attacker with low privileges to trigger an out-of-bounds read, potentially leading to information disclosure

CVSS v3.1: 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.21% chance of exploitation in the next 30 days, 12th percentile
Published: 2025-04-16
Updated: 2025-05-08

Proof-of-concept exploits (1)

https://issuetracker.google.com/issues/380043638

References

Related