Out-of-Bounds Read Vulnerability in Linux Kernel Affecting Audio USB Devices

CVE-2025-38249

What is CVE-2025-38249?

A vulnerability in the Linux kernel's USB audio subsystem allows an attacker to exploit an out-of-bounds read scenario. The issue arises in the function snd_usb_get_audioformat_uac3(), where length values from snd_usb_ctl_msg() are utilized without proper validation. The absence of a length check may result in a buffer being allocated that is insufficient for the expected uac3_cluster_header_descriptor. This flaw could lead to unauthorized access to memory regions, accentuating the need for timely updates and patches.

References