CVE-2025-39760
published 2025-09-11CVE-2025-39760: In the Linux kernel, the following vulnerability has been resolved: usb: core: config: Prevent OOB read in SS endpoint companion parsing…
high7.1CVSS 3.1
AVLACLPRLUINSUCHINAH
In the Linux kernel, the following vulnerability has been resolved:
usb: core: config: Prevent OOB read in SS endpoint companion parsing
usb_parse_ss_endpoint_companion() checks descriptor type before length,
enabling a potentially odd read outside of the buffer size.
Fix this up by checking the size first before looking at any of the
fields in the descriptor.
Affected
35 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | linux | < linux 6.1.153-1 (bookworm) | linux 6.1.153-1 (bookworm) |
| debian | linux-6.1 | < linux 6.1.153-1 (bookworm) | linux 6.1.153-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 < 5c3097ede7835d3caf6543eb70ff689af4550cd2 | 5c3097ede7835d3caf6543eb70ff689af4550cd2 |
| linux | linux | >= 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 < 058ad2b722812708fe90567875704ae36563e33b | 058ad2b722812708fe90567875704ae36563e33b |
| linux | linux | >= 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 < b10e0f868067c6f25bbfabdcf3e1e6432c24ca55 | b10e0f868067c6f25bbfabdcf3e1e6432c24ca55 |
| linux | linux | >= 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 < 5badd56c711e2c8371d1670f9bd486697575423c | 5badd56c711e2c8371d1670f9bd486697575423c |
| linux | linux | >= 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 < 9512510cee7d1becdb0e9413fdd3ab783e4e30ee | 9512510cee7d1becdb0e9413fdd3ab783e4e30ee |
| linux | linux | >= 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 < 4fe6f472f0beef4281e6f03bc38a910a33be663f | 4fe6f472f0beef4281e6f03bc38a910a33be663f |
| linux | linux | >= 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 < 9843bcb187cb933861f7805022e6873905f669e4 | 9843bcb187cb933861f7805022e6873905f669e4 |
| linux | linux | >= 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 < cf16f408364efd8a68f39011a3b073c83a03612d | cf16f408364efd8a68f39011a3b073c83a03612d |
| linux | linux_kernel | >= 0 < 5.10.244-1 | 5.10.244-1 |
| linux | linux_kernel | >= 0 < 6.1.153-1 | 6.1.153-1 |
| linux | linux_kernel | >= 0 < 6.12.43-1 | 6.12.43-1 |
| linux | linux_kernel | >= 0 < 6.16.3-1 | 6.16.3-1 |
| linux | linux_kernel | >= 0 < 5.15.0-163.173 | 5.15.0-163.173 |
| linux | linux_kernel | >= 0 < 6.8.0-100.100 | 6.8.0-100.100 |
| linux | linux_kernel | >= 2.6.35 < 5.10.241 | 5.10.241 |
| linux | linux_kernel | >= 5.11 < 5.15.190 | 5.15.190 |
| linux | linux_kernel | >= 5.16 < 6.1.149 | 6.1.149 |
| linux | linux_kernel | >= 6.13 < 6.15.11 | 6.15.11 |
| linux | linux_kernel | >= 6.16 < 6.16.2 | 6.16.2 |
| linux | linux_kernel | >= 6.2 < 6.6.103 | 6.6.103 |
| linux | linux_kernel | >= 6.7 < 6.12.43 | 6.12.43 |
CVSS provenance
nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
osv7.1HIGH