Error Handling Flaw in AQC111 Driver of Linux Kernel by Vendor

CVE-2025-38153

What is CVE-2025-38153?

A vulnerability in the AQC111 driver of the Linux kernel was identified that stems from inadequate error handling during USB read operations. Specifically, the function 'usbnet_read_cmd()' may return fewer bytes than requested, leading to improper initialization of critical variables like the MAC address in subsequent processing. This oversight can result in system warnings and instability. A fix has been implemented to ensure that the number of bytes read is thoroughly verified against expectations prior to usage, enhancing the driver’s robustness against such issues.

References