Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-39760

usb: core: config: Prevent OOB read in SS endpoint companion parsing

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: usb: core: config: Prevent OOB read in SS endpoint companion parsing usb_parse_ss_endpoint_companion() checks descriptor type before length, enabling a potentially odd read outside of the buffer size. Fix this up by checking the size first before looking at any of the fields in the descriptor.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 to < 5c3097ede7835d3caf6543eb70ff689af4550cd2affected
  • 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 to < 058ad2b722812708fe90567875704ae36563e33baffected
  • 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 to < b10e0f868067c6f25bbfabdcf3e1e6432c24ca55affected
  • 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 to < 5badd56c711e2c8371d1670f9bd486697575423caffected
  • 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 to < 9512510cee7d1becdb0e9413fdd3ab783e4e30eeaffected
  • 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 to < 4fe6f472f0beef4281e6f03bc38a910a33be663faffected
  • 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 to < 9843bcb187cb933861f7805022e6873905f669e4affected
  • 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 to < cf16f408364efd8a68f39011a3b073c83a03612daffected

Linux Linux

Default version status: affected

  • 2.6.35affected
  • 0 to < 2.6.35unaffected
  • 5.10.241 to ≤ 5.10.*unaffected
  • 5.15.190 to ≤ 5.15.*unaffected
  • 6.1.149 to ≤ 6.1.*unaffected
  • 6.6.103 to ≤ 6.6.*unaffected
  • 6.12.43 to ≤ 6.12.*unaffected
  • 6.15.11 to ≤ 6.15.*unaffected
  • 6.16.2 to ≤ 6.16.*unaffected
  • 6.17 to ≤ *unaffected

References