Linux Kernel Vulnerability in RNDIS Gadget Handling

CVE-2025-40095

What is CVE-2025-40095?

A vulnerability in the Linux kernel's RNDIS gadget handling can lead to a NULL pointer dereference during bind/unbind cycles. When the bind operation encounters a failure, the error handling mechanism may attempt to free a stale notify request, resulting in potential system instability. The fix refactors the error handling to utilize an automatic cleanup feature, enhancing the robustness of the USB gadget operations.

References