Out-of-Bounds Read Vulnerability in Linux Kernel USB Core
CVE-2025-39760
What is CVE-2025-39760?
A vulnerability has been identified in the Linux kernel's USB core that allows for out-of-bounds reads within the SS endpoint companion parsing. Specifically, the function usb_parse_ss_endpoint_companion() inadequately checks the descriptor type against the specified length before accessing fields, which could lead to unauthorized access to memory. This oversight has been addressed by implementing better size validation checks before field access to enhance overall security and system integrity.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Linux 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 < 5c3097ede7835d3caf6543eb70ff689af4550cd2
Linux 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8 < 058ad2b722812708fe90567875704ae36563e33b
Linux 842f16905dfc6743c1dd80c3d29b49ba3ab7f7c8