Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-38474

usb: net: sierra: check for no status endpoint

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: usb: net: sierra: check for no status endpoint The driver checks for having three endpoints and having bulk in and out endpoints, but not that the third endpoint is interrupt input. Rectify the omission.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • eb4fd8cd355c8ec425a12ec6cbdac614e8a4819d to < 0a263ccb905b4ae2af381cd4280bd8d2477b98b8affected
  • eb4fd8cd355c8ec425a12ec6cbdac614e8a4819d to < 5408cc668e596c81cdd29e137225432aa40d1785affected
  • eb4fd8cd355c8ec425a12ec6cbdac614e8a4819d to < a6a238c4126eb3ddb495d3f960193ca5bb778d92affected
  • eb4fd8cd355c8ec425a12ec6cbdac614e8a4819d to < 5849980faea1c792d1d5e54fdbf1e69ac0a9bfb9affected
  • eb4fd8cd355c8ec425a12ec6cbdac614e8a4819d to < 5dd6a441748dad2f02e27b256984ca0b2d4546b6affected
  • eb4fd8cd355c8ec425a12ec6cbdac614e8a4819d to < 65c666aff44eb7f9079c55331abd9687fb77ba2daffected
  • eb4fd8cd355c8ec425a12ec6cbdac614e8a4819d to < bfe8ef373986e8f185d3d6613eb1801a8749837aaffected
  • eb4fd8cd355c8ec425a12ec6cbdac614e8a4819d to < 4c4ca3c46167518f8534ed70f6e3b4bf86c4d158affected

Linux Linux

Default version status: affected

  • 2.6.34affected
  • 0 to < 2.6.34unaffected
  • 5.4.297 to ≤ 5.4.*unaffected
  • 5.10.241 to ≤ 5.10.*unaffected
  • 5.15.190 to ≤ 5.15.*unaffected
  • 6.1.147 to ≤ 6.1.*unaffected
  • 6.6.100 to ≤ 6.6.*unaffected
  • 6.12.40 to ≤ 6.12.*unaffected
  • 6.15.8 to ≤ 6.15.*unaffected
  • 6.16 to ≤ *unaffected

References