PT-2025-46639 · Usbnet+4 · Usbnet+4
Published
2025-10-11
·
Updated
2026-05-22
·
CVE-2025-40164
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.15.0-rc4-syzkaller-00098-g615dca38c2ea
Description
The Linux kernel contains an issue where
smp processor id() is used in preemptible code, leading to warnings reported by Syzbot. Specifically, the issue occurs within the usbnet skb return function in drivers/net/usb/usbnet.c. The usbnet resume rx function lacked local bh disable/enable protection, which has been added to address the problem. This issue was identified through testing with Syzbot and affects the usbnet driver.Recommendations
Update to Linux kernel version 6.15.0-rc4-syzkaller-00098-g615dca38c2ea or a later version to resolve this issue.
Exploit
Fix
Stack Overflow
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu
Usbnet