Out-of-Bounds Read Vulnerability in Linux Kernel USB Core

CVE-2025-39760

What is CVE-2025-39760?

A vulnerability has been identified in the Linux kernel's USB core that allows for out-of-bounds reads within the SS endpoint companion parsing. Specifically, the function usb_parse_ss_endpoint_companion() inadequately checks the descriptor type against the specified length before accessing fields, which could lead to unauthorized access to memory. This oversight has been addressed by implementing better size validation checks before field access to enhance overall security and system integrity.

References