CVE-2025-38474 — Improper Handling of Missing Special Element in Linux
Severity
5.5MEDIUMNVD
OSV3.2
EPSS
0.0%
top 94.04%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJul 28
Latest updateMar 25
Description
In the Linux kernel, the following vulnerability has been resolved:
usb: net: sierra: check for no status endpoint
The driver checks for having three endpoints and
having bulk in and out endpoints, but not that
the third endpoint is interrupt input.
Rectify the omission.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages4 packages
▶CVEListV5linux/linuxeb4fd8cd355c8ec425a12ec6cbdac614e8a4819d — 0a263ccb905b4ae2af381cd4280bd8d2477b98b8+8
Also affects: Debian Linux 11.0