Linux USB Device Driver DoS

The vulnerability of the cdns3gadgetepenable and cdns3gadgetepdequeue functions in the drivers/usb/cdns3/cdns3-gadget.c driver for USB device drivers in the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-40315 usb: gadget: f_fs: Fix epfile null pointer access after ep enable.

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Fix epfile null pointer access after ep enable. A race condition occurs when ffsfuncepsenable runs concurrently with ffsdatareset. The ffsdataclear called in ffsdatareset sets ffs-epfiles to NULL before resettin...

CVE-2025-40315

CVE-2025-40315: In the Linux kernel usb gadget f_fs, a race allowed NULL pointer dereference when ffs_func_eps_enable() could access epfile->ep after concurrent ffs_data_reset(). The fix adds NULL pointer handling for ffs->epfiles in ffs_func_eps_enable() and aligns NULLing of epfiles under...

PT-2025-49444

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists within the USB gadget f fs functionality. Specifically, a NULL pointer dereference can occur in the ffs func eps enable function when accessing epfile-ep after a...

PT-2022-34103

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.137 Description The issue is related to the cdns3 gadget driver in the Linux Kernel. It involves the cdns3 gadget ep dequeue and cdns3 gadget ep enable functions, where the assignment of priv ep is misplace...

PT-2018-2820

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is caused by an out-of-bounds operation in the xudc ep enable handler of the udc-xilinx.ko module in the Linux kernel. This can allow an attacker to write to unauthorized memor...