CVE-2025-38729

🗓️ 04 Sep 2025 16:15:43Reported by [email protected]Type

ALSA usb-audio validates USB Audio Class 3 power domain descriptors with bLength to prevent out-of-bounds access by malicious firmware.

Reporter	Title	Published	Views	Family All 255
AstraLinux	Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15	14 Sep 202612:41	–	astralinux
BDU FSTEC	The vulnerability in the `sound/usb/validate.c` component of the Linux operating system allows a hacker to trigger a service failure.	15 Dec 202500:00	–	bdu_fstec
CBLMariner	CVE-2025-38729 affecting package kernel for versions less than 6.6.104.2-1	1 Oct 202519:21	–	cbl_mariner
CBLMariner	CVE-2025-38729 affecting package kernel for versions less than 5.15.200.1-1	9 Mar 202614:32	–	cbl_mariner
Tenable Nessus	CentOS Linux 7.9 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-whitelists / etc Multiple Vulnerabilities (ciqsa-2026_0653)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 8.6 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (ciqsa-2026_0011)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.2 [CIQ] Security Update: bpftool / kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ciqsa-2026_0393)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.2 [CIQ] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ciqsa-2026_0619)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.2 [CIQ] Security Update: bpftool-debuginfo Multiple Vulnerabilities (ciqsa-2026_1240)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.2 [CIQ] Security Update: bpftool-debuginfo Multiple Vulnerabilities (ciqsa-2026_1249)	1 Oct 202600:00	–	nessus

NVD

Node

linux linux_kernelRange4.17–5.4.297

linux linux_kernelRange5.5–5.10.241

linux linux_kernelRange5.11–5.15.190

linux linux_kernelRange5.16–6.1.149

linux linux_kernelRange6.2–6.6.103

linux linux_kernelRange6.7–6.12.43

linux linux_kernelRange6.13–6.15.11

linux linux_kernelRange6.16–6.16.2

linux linux_kernelMatch6.17rc1

Node

debian debian_linuxMatch11.0

Source	Link
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-032379.html
git	www.git.kernel.org/stable/c/1666207ba0a5973735ef010812536adde6174e81
git	www.git.kernel.org/stable/c/452ad54f432675982cc0d6eb6c40a6c86ac61dbd
git	www.git.kernel.org/stable/c/40714daf4d0448e1692c78563faf0ed0f9d9b5c7
git	www.git.kernel.org/stable/c/d832ccbc301fbd9e5a1d691bdcf461cdb514595f
lists	www.lists.debian.org/debian-lts-announce/2025/10/msg00008.html
git	www.git.kernel.org/stable/c/29b415ec09f5b9d1dfa2423b826725a8c8796b9a
git	www.git.kernel.org/stable/c/07c8d78dbb5e0ff8b23f7fd69cd1d4e2ba22b3dc
git	www.git.kernel.org/stable/c/ebc9e06b6ea978a20abf9b87d41afc51b2d745ac
git	www.git.kernel.org/stable/c/cd08d390d15b204cac1d3174f5f149a20c52e61a

17 Jun 2026 09:17Current

CVSS 3.17.8

EPSS0.00192

CWE-787