PT-2025-49376 · Linux+3 · Linux Kernel+3
CVE-2025-40275
·
Published
2025-11-12
·
Updated
2026-05-26
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a flaw within the ALSA subsystem, specifically in the
snd usb mixer controls badd() function. A NULL pointer dereference can occur when processing USB audio devices using UAC version 3. This happens because the function assumes the Interface Association Descriptor (IAD) retrieved via usb ifnum to if() is always valid, without checking for a NULL value. The issue is triggered when usb ifnum to if() fails to find the interface descriptor, leading to a dereference of a NULL pointer. The problem was identified by syzkaller using a crafted USB device descriptor.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Improper Resource Release
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu