CVE-2025-39760
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
usb: core: config: Prevent OOB read in SS endpoint companion parsing
In the Linux kernel, the following vulnerability has been resolved: usb: core: config: Prevent OOB read in SS endpoint companion parsing usb_parse_ss_endpoint_companion() checks descriptor type before length, enabling a potentially odd read outside of the buffer size. Fix this up by checking the size first before looking at any of the fields in the descriptor.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 | affected | git | 5c3097ede7835d3caf6543eb70ff689af4550cd2 | Unavailable | None listed |
| 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 | affected | git | 058ad2b722812708fe90567875704ae36563e33b | Unavailable | None listed |
| 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 | affected | git | b10e0f868067c6f25bbfabdcf3e1e6432c24ca55 | Unavailable | None listed |
| 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 | affected | git | 5badd56c711e2c8371d1670f9bd486697575423c | Unavailable | None listed |
| 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 | affected | git | 9512510cee7d1becdb0e9413fdd3ab783e4e30ee | Unavailable | None listed |
| 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 | affected | git | 4fe6f472f0beef4281e6f03bc38a910a33be663f | Unavailable | None listed |
| 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 | affected | git | 9843bcb187cb933861f7805022e6873905f669e4 | Unavailable | None listed |
| 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 | affected | git | cf16f408364efd8a68f39011a3b073c83a03612d | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2.6.35 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 2.6.35 | Unavailable | None listed |
| 5.10.241 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.190 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.149 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.103 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.43 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.15.11 | unaffected | semver | Unavailable | 6.15.* | None listed |
| 6.16.2 | unaffected | semver | Unavailable | 6.16.* | None listed |
| 6.17 | unaffected | original_commit_for_fix | Unavailable | * | None listed |