PT-2025-31071 · Linux+5 · Linux Kernel+5

Published 2025-07-14 · Updated 2026-05-26 · CVE-2025-38474

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel driver does not properly validate the presence of an interrupt input endpoint when checking for three endpoints, bulk in, and bulk out endpoints. This omission could lead to issues during device operation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

AZL-65952

AZL-72974

BDU:2025-09176

CVE-2025-38474

DLA-4327-1

DLA-4328-1

DSA-5973-1

DSA-5975-1

ECHO-E08F-815C-98BA

MGASA-2025-0218

MGASA-2025-0219

OESA-2025-1959

OESA-2025-1960

OESA-2025-1961

OESA-2025-1963

OESA-2025-1964

OESA-2025-2080

OPENSUSE-SU-2025:20081-1

SUSE-SU-2025:02853-1

SUSE-SU-2025:02923-1

SUSE-SU-2025:02969-1

SUSE-SU-2025:02996-1

SUSE-SU-2025:02997-1

SUSE-SU-2025:03011-1

SUSE-SU-2025:03023-1

SUSE-SU-2025:03204-1

SUSE-SU-2025:20577-1

SUSE-SU-2025:20586-1

SUSE-SU-2025:20601-1

SUSE-SU-2025:20602-1

SUSE-SU-2025:21074-1

SUSE-SU-2025:21139-1

SUSE-SU-2025:21179-1

SUSE-SU-2025_02853-1

SUSE-SU-2025_02969-1

SUSE-SU-2025_02996-1

SUSE-SU-2025_02997-1

SUSE-SU-2025_03011-1

SUSE-SU-2025_03023-1

SUSE-SU-2025_03204-1

USN-7879-1

USN-7879-2

USN-7879-3

USN-7879-4

USN-7880-1

USN-7909-1

USN-7909-2

USN-7909-3

USN-7909-4

USN-7909-5

USN-7910-1

USN-7910-2

USN-7933-1

USN-7934-1

USN-7938-1

USN-8028-1

USN-8028-2

USN-8028-3

USN-8028-4

USN-8028-5

USN-8028-6

USN-8028-7

USN-8028-8

USN-8031-1

USN-8031-2

USN-8031-3

USN-8052-1

USN-8052-2

USN-8074-1

USN-8074-2

USN-8126-1

Affected Products

Debian

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 3367

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38474.json · Exploit
• https://ubuntu.com/security/CVE-2025-40333 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68222 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38396 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-38474 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38576 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39734 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22128 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68183 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23157 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38642 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38217 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39795 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4328-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39800 · Vendor Advisory