Linux Kernel Vulnerability in Sierra USB Driver

CVE-2025-38474

What is CVE-2025-38474?

A vulnerability exists in the Sierra USB driver of the Linux kernel, where the driver inadequately checks for a status endpoint. While it verifies the presence of three endpoints and checks that two are bulk input/output, it fails to ensure that the third endpoint functions as an interrupt input. This oversight could lead to unexpected behaviors or security issues. The resolution requires rectifying the omission to enhance the driver's integrity and prevent potential exploitation.

References