cbcvebase.
CVE-2025-40116
published 2025-11-12

CVE-2025-40116: In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup The kthread_run()…

PriorityP419high7.8
EPSS
0.21%
11.6th percentile
In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup The kthread_run() function returns error pointers so the max3421_hcd->spi_thread pointer can be either error pointers or NULL. Check for both before dereferencing it.

Affected

31 ranges· showing 25
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.158-1 (bookworm)linux 6.1.158-1 (bookworm)
debianlinux-6.1< linux 6.1.158-1 (bookworm)linux 6.1.158-1 (bookworm)
linuxlinux
linuxlinux>= 05dfa5c9bc37933181b619e42ec0eeb41ef31362 < 89838fe5c6c010ff8d3924f22afd9c18c5c9531089838fe5c6c010ff8d3924f22afd9c18c5c95310
linuxlinux>= 05dfa5c9bc37933181b619e42ec0eeb41ef31362 < 3facf69a735e730ae36387f18780fe420708aa913facf69a735e730ae36387f18780fe420708aa91
linuxlinux>= 05dfa5c9bc37933181b619e42ec0eeb41ef31362 < e0e0ce06f3571be9b26790e4df56ba37b1de8543e0e0ce06f3571be9b26790e4df56ba37b1de8543
linuxlinux>= 05dfa5c9bc37933181b619e42ec0eeb41ef31362 < 3723c3dda1cc82c9bbca08fcbd46705a361bfd563723c3dda1cc82c9bbca08fcbd46705a361bfd56
linuxlinux>= 05dfa5c9bc37933181b619e42ec0eeb41ef31362 < b0439e3762ac9ea580f714e1504a1827d1ad32f5b0439e3762ac9ea580f714e1504a1827d1ad32f5
linuxlinux>= 05dfa5c9bc37933181b619e42ec0eeb41ef31362 < e68ea6de1d0551f90d7a2c75f82cb3ebe5e397dce68ea6de1d0551f90d7a2c75f82cb3ebe5e397dc
linuxlinux>= 05dfa5c9bc37933181b619e42ec0eeb41ef31362 < b682ce44bf20ada752a2f6ce70d5a575c56f6a35b682ce44bf20ada752a2f6ce70d5a575c56f6a35
linuxlinux>= 05dfa5c9bc37933181b619e42ec0eeb41ef31362 < 186e8f2bdba551f3ae23396caccd452d985c23e3186e8f2bdba551f3ae23396caccd452d985c23e3
linuxlinux_kernel>= 0 < 5.10.247-15.10.247-1
linuxlinux_kernel>= 0 < 6.1.158-16.1.158-1
linuxlinux_kernel>= 0 < 6.12.57-16.12.57-1
linuxlinux_kernel>= 0 < 6.17.6-16.17.6-1
linuxlinux_kernel>= 0 < 5.15.0-170.1805.15.0-170.180
linuxlinux_kernel>= 0 < 6.8.0-106.1066.8.0-106.106
linuxlinux_kernel>= 0 < 6.17.0-14.146.17.0-14.14
linuxlinux_kernel>= 3.16.0 < 5.4.3015.4.301
linuxlinux_kernel>= 5.11.0 < 5.15.1955.15.195
linuxlinux_kernel>= 5.16.0 < 6.1.1566.1.156
linuxlinux_kernel>= 5.5.0 < 5.10.2465.10.246
linuxlinux_kernel>= 6.13.0 < 6.17.36.17.3
linuxlinux_kernel>= 6.2.0 < 6.6.1126.6.112
linuxlinux_kernel>= 6.7.0 < 6.12.536.12.53

CVSS provenance

osv7.8HIGH
vendor_ubuntu7.8HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.