CVE-2025-40275

A null pointer dereference was found in the USB audio driver in the Linux kernel. For UAC3 devices, sndusbmixercontrolsbadd does not check if usbifnumtoif returns NULL before dereferencing the result. A malicious USB device with crafted descriptors can trigger this crash...

CVE-2025-40275 ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix NULL pointer dereference in sndusbmixercontrolsbadd In sndusbcreatestreams, for UAC version 3 devices, the Interface Association Descriptor IAD is retrieved via usbifnumtoif. If this call fails, a fallback...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an unchecked usbifnumtoif return value that could lead to a null pointer dereference...