CVE-2025-40275 — Unchecked Return Value in Linux
Severity
7.8HIGHOSV
OSV3.2
No vectorEPSS
0.1%
top 79.07%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 6
Latest updateApr 13
Description
In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd
In snd_usb_create_streams(), for UAC version 3 devices, the Interface
Association Descriptor (IAD) is retrieved via usb_ifnum_to_if(). If this
call fails, a fallback routine attempts to obtain the IAD from the next
interface and sets a BADD profile. However, snd_usb_mixer_controls_badd()
assumes that the IAD retrieved from usb_ifnum_to_if() is always …
Affected Packages7 packages
▶CVEListV5linux/linux17156f23e93c0f59e06dd2aaffd06221341caaee — 23aea9c74aeea2625aaf4fbcc6beb9d09e30f9e4+8