CVE-2025-38729
published 2025-09-04CVE-2025-38729: In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 power domain descriptors, too UAC3 power domain descriptors…
high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Validate UAC3 power domain descriptors, too
UAC3 power domain descriptors need to be verified with its variable
bLength for avoiding the unexpected OOB accesses by malicious
firmware, too.
Affected
40 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | linux | < linux 6.1.153-1 (bookworm) | linux 6.1.153-1 (bookworm) |
| debian | linux-6.1 | < linux 6.1.153-1 (bookworm) | linux 6.1.153-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 9a2fe9b801f585baccf8352d82839dcd54b300cf < 1666207ba0a5973735ef010812536adde6174e81 | 1666207ba0a5973735ef010812536adde6174e81 |
| linux | linux | >= 9a2fe9b801f585baccf8352d82839dcd54b300cf < ebc9e06b6ea978a20abf9b87d41afc51b2d745ac | ebc9e06b6ea978a20abf9b87d41afc51b2d745ac |
| linux | linux | >= 9a2fe9b801f585baccf8352d82839dcd54b300cf < f03418bb9d542f44df78eec2eff4ac83c0a8ac0d | f03418bb9d542f44df78eec2eff4ac83c0a8ac0d |
| linux | linux | >= 9a2fe9b801f585baccf8352d82839dcd54b300cf < 40714daf4d0448e1692c78563faf0ed0f9d9b5c7 | 40714daf4d0448e1692c78563faf0ed0f9d9b5c7 |
| linux | linux | >= 9a2fe9b801f585baccf8352d82839dcd54b300cf < 07c8d78dbb5e0ff8b23f7fd69cd1d4e2ba22b3dc | 07c8d78dbb5e0ff8b23f7fd69cd1d4e2ba22b3dc |
| linux | linux | >= 9a2fe9b801f585baccf8352d82839dcd54b300cf < cd08d390d15b204cac1d3174f5f149a20c52e61a | cd08d390d15b204cac1d3174f5f149a20c52e61a |
| linux | linux | >= 9a2fe9b801f585baccf8352d82839dcd54b300cf < 29b415ec09f5b9d1dfa2423b826725a8c8796b9a | 29b415ec09f5b9d1dfa2423b826725a8c8796b9a |
| linux | linux | >= 9a2fe9b801f585baccf8352d82839dcd54b300cf < 452ad54f432675982cc0d6eb6c40a6c86ac61dbd | 452ad54f432675982cc0d6eb6c40a6c86ac61dbd |
| linux | linux | >= 9a2fe9b801f585baccf8352d82839dcd54b300cf < d832ccbc301fbd9e5a1d691bdcf461cdb514595f | d832ccbc301fbd9e5a1d691bdcf461cdb514595f |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.244-1 | 5.10.244-1 |
| linux | linux_kernel | >= 0 < 6.1.153-1 | 6.1.153-1 |
| linux | linux_kernel | >= 0 < 6.12.43-1 | 6.12.43-1 |
| linux | linux_kernel | >= 0 < 6.16.3-1 | 6.16.3-1 |
| linux | linux_kernel | >= 0 < 5.15.0-163.173 | 5.15.0-163.173 |
| linux | linux_kernel | >= 0 < 6.8.0-100.100 | 6.8.0-100.100 |
| linux | linux_kernel | >= 4.17 < 5.4.297 | 5.4.297 |
| linux | linux_kernel | >= 5.11 < 5.15.190 | 5.15.190 |
| linux | linux_kernel | >= 5.16 < 6.1.149 | 6.1.149 |
| linux | linux_kernel | >= 5.5 < 5.10.241 | 5.10.241 |
| linux | linux_kernel | >= 6.13 < 6.15.11 | 6.15.11 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH