CVE-2025-40094

The CVE-2025-40094 issue lies in the Linux kernel USB gadget driver (f_acm) where, after a bind/unbind cycle, acm->notify_req can become stale. If a subsequent bind fails, the error path frees this stale request, causing a NULL dereference at ep->ops->free_request. The connected sources ...