The vulnerability in the `sound/usb/validate.c` component of the Linux operating system allows a hacker to trigger a service failure.

🗓️ 15 Dec 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec🔗 bdu.fstec.ru👁 19 Views

A vulnerability in sound/usb/validate.c allows reading beyond buffer limits to trigger Linux service failure.

Reporter	Title	Published	Views	Family All 256
AstraLinux	Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15	14 Sep 202612:41	–	astralinux
CBLMariner	CVE-2025-38729 affecting package kernel for versions less than 6.6.104.2-1	1 Oct 202519:21	–	cbl_mariner
CBLMariner	CVE-2025-38729 affecting package kernel for versions less than 5.15.200.1-1	9 Mar 202614:32	–	cbl_mariner
Tenable Nessus	CentOS Linux 7.9 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-whitelists / etc Multiple Vulnerabilities (ciqsa-2026_0653)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 8.6 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (ciqsa-2026_0011)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.2 [CIQ] Security Update: bpftool / kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ciqsa-2026_0393)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.2 [CIQ] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ciqsa-2026_0619)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.2 [CIQ] Security Update: bpftool-debuginfo Multiple Vulnerabilities (ciqsa-2026_1240)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.2 [CIQ] Security Update: bpftool-debuginfo Multiple Vulnerabilities (ciqsa-2026_1249)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.4 [CIQ] Security Update: bpftool / kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ciqsa-2026_0518)	1 Oct 202600:00	–	nessus

Source	Link
git	www.git.kernel.org/linus/d832ccbc301fbd9e5a1d691bdcf461cdb514595f
git	www.git.kernel.org/stable/c/07c8d78dbb5e0ff8b23f7fd69cd1d4e2ba22b3dc
git	www.git.kernel.org/stable/c/1666207ba0a5973735ef010812536adde6174e81
git	www.git.kernel.org/stable/c/29b415ec09f5b9d1dfa2423b826725a8c8796b9a
git	www.git.kernel.org/stable/c/40714daf4d0448e1692c78563faf0ed0f9d9b5c7
git	www.git.kernel.org/stable/c/452ad54f432675982cc0d6eb6c40a6c86ac61dbd
git	www.git.kernel.org/stable/c/cd08d390d15b204cac1d3174f5f149a20c52e61a
git	www.git.kernel.org/stable/c/d832ccbc301fbd9e5a1d691bdcf461cdb514595f
git	www.git.kernel.org/stable/c/ebc9e06b6ea978a20abf9b87d41afc51b2d745ac
git	www.git.kernel.org/stable/c/f03418bb9d542f44df78eec2eff4ac83c0a8ac0d

06 Jul 2026 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 24.6

CVSS 35.5

EPSS0.00192

linux vulnerability sound usb validate buffer overread service failure