CVE-2025-2073 – Google ChromeOS Kernel ip_set Bitmap Out-of-Bounds Read

The following table lists the changes that have been made to the
CVE-2025-2073 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by 7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f

    Apr. 16, 2025

    Action Type Old Value New Value
    Added Description Out-of-Bounds Read in ip_set_bitmap_ip.c in Google ChromeOS Kernel Versions 6.1, 5.15, 5.10, 5.4, 4.19. on All devices where Termina is used allows an attacker with CAP_NET_ADMIN privileges to cause memory corruption and potentially escalate privileges via crafted ipset commands.
    Added Reference https://issues.chromium.org/issues/b/380043638
    Added Reference https://issuetracker.google.com/issues/380043638
Share the Post:

Related Posts