CVE-2025-39760: usb: core: config: Prevent OOB read in SS endpoint companion parsing
In the Linux kernel, the following vulnerability has been resolved:
usb: core: config: Prevent OOB read in SS endpoint companion parsing
usbparsessendpointcompanion() checks descriptor type before length, enabling a potentially odd read outside of the buffer size.
Fix this up by checking the size first before looking at any of the fields in the descriptor.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39760?
CVE-2025-39760 is classified as a medium severity vulnerability that can lead to out-of-bounds reads.
How do I fix CVE-2025-39760?
To fix CVE-2025-39760, update the Linux kernel to a version where the vulnerability has been patched.
What systems are affected by CVE-2025-39760?
CVE-2025-39760 affects the Linux kernel, specifically versions prior to the patch release that addresses this issue.
Can CVE-2025-39760 be exploited remotely?
CVE-2025-39760 may allow an attacker to exploit the vulnerability through crafted USB descriptors, potentially leading to data exposure.
What protections are available against CVE-2025-39760?
Using updated kernel versions and implementing security features such as USB filtering can help mitigate the risks associated with CVE-2025-39760.