CVE-2025-39760

usb: core: config: Prevent OOB read in SS endpoint companion parsing

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.2%

exploitation probability

0.2%top 94% of all CVEs

observed exploitation

nono source reports it

In the Linux kernel, the following vulnerability has been resolved: usb: core: config: Prevent OOB read in SS endpoint companion parsing usb_parse_ss_endpoint_companion() checks descriptor type before length, enabling a potentially odd read outside of the buffer size. Fix this up by checking the size first before looking at any of the fields in the descriptor.

Affected products

Linux · Linux

References