CVE-2025-39757

HighCVSS 7.1/10Last modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb-audio: Validate UAC3 cluster segment descriptors

UAC3 class segment descriptors need to be verified whether their sizes match with the declared lengths and whether they fit with the allocated buffer sizes, too. Otherwise malicious firmware may lead to the unexpected OOB accesses.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
LinuxLinux>= 11785ef53228d23ec386f5fe4a34601536f0c891, < 799c06ad4c9c790c265e8b6b94947213f1fb389c; >= 11785ef53228d23ec386f5fe4a34601536f0c891, < 786571b10b1ae6d90e1242848ce78ee7e1d493c4; >= 11785ef53228d23ec386f5fe4a34601536f0c891, < 275e37532e8ebe25e8a4069b2d9f955bfd202a46; >= 11785ef53228d23ec386f5fe4a34601536f0c891, < 47ab3d820cb0a502bd0074f83bb3cf7ab5d79902; >= 11785ef53228d23ec386f5fe4a34601536f0c891, < 1034719fdefd26caeec0a44a868bb5a412c2c1a5; >= 11785ef53228d23ec386f5fe4a34601536f0c891, < ae17b3b5e753efc239421d186cd1ff06e5ac296e; >= 11785ef53228d23ec386f5fe4a34601536f0c891, < dfdcbcde5c20df878178245d4449feada7d5b201; >= 11785ef53228d23ec386f5fe4a34601536f0c891, < 7ef3fd250f84494fb2f7871f357808edaa1fc6ce; >= 11785ef53228d23ec386f5fe4a34601536f0c891, < ecfd41166b72b67d3bdeb88d224ff445f6163869
LinuxLinux4.19
SiemensSIMATIC CN 4100< V5.0

References

Timeline

Published
Sep 11, 2025
Last modified
Oct 19, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-397585.5In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages Ever since cCVE-2025-397597.0In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix race between quota disable and quota rescan ioctl TCVE-2025-39769.8A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been classified as critical. Affected is an unknown fuCVE-2025-397607.1In the Linux kernel, the following vulnerability has been resolved: usb: core: config: Prevent OOB read in SS endpoint companion parsing uCVE-2025-397617.1In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Decrement TID on RX peer frag setup error handling CurreCVE-2025-397625.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: add null check [WHY] Prevents null pointer dereferencCVE-2025-397635.5In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: send SIGBUS to current task if synchronous memory error notCVE-2025-397645.5In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: remove refcounting in expectation dumpers Same pCVE-2025-397655.5In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: fix ida_free call while not allocated In the snd_utimer_cCVE-2025-397667.8In the Linux kernel, the following vulnerability has been resolved: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit CVE-2025-397675.5In the Linux kernel, the following vulnerability has been resolved: LoongArch: Optimize module load time by optimizing PLT/GOT counting WhCVE-2025-397685.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, fix complex rules rehash error flow Moving rules from m
CVE-2025-39757: High severity, CVSS 7.1 | Vulnix