High severity · published Sep 4, 2025
CVE-2025-38729
ALSA: usb-audio: Validate UAC3 power domain descriptors, too
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Validate UAC3 power domain descriptors, too
UAC3 power domain descriptors need to be verified with its variable
bLength for avoiding the unexpected OOB accesses by malicious
firmware, too.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
4.17 before 5.4.297; 5.5 before 5.10.241; 5.11 before 5.15.190; 5.16 before 6.1.149; 6.2 before 6.6.103; 6.7 before 6.12.43; +3 more · source: NVD
LI
Linux · Linux
9a2fe9b801f585baccf8352d82839dcd54b300cf before 1666207ba0a5973735ef010812536adde6174e81; 9a2fe9b801f585baccf8352d82839dcd54b300cf before ebc9e06b6ea978a20abf9b87d41afc51b2d745ac; 9a2fe9b801f585baccf8352d82839dcd54b300cf before f03418bb9d542f44df78eec2eff4ac83c0a8ac0d; 9a2fe9b801f585baccf8352d82839dcd54b300cf before 40714daf4d0448e1692c78563faf0ed0f9d9b5c7; 9a2fe9b801f585baccf8352d82839dcd54b300cf before 07c8d78dbb5e0ff8b23f7fd69cd1d4e2ba22b3dc; 9a2fe9b801f585baccf8352d82839dcd54b300cf before cd08d390d15b204cac1d3174f5f149a20c52e61a; +4 more · source: vendor
DL
Debian Linux · Debian
11.0 · source: NVD
SC
SIMATIC CN 4100 · Siemens
before V5.0 · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-38729
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-38729
Patch
https://git.kernel.org/stable/c/07c8d78dbb5e0ff8b23f7fd69cd1d4e2ba22b3dc
Patch
https://git.kernel.org/stable/c/1666207ba0a5973735ef010812536adde6174e81
Patch
https://git.kernel.org/stable/c/29b415ec09f5b9d1dfa2423b826725a8c8796b9a
Patch
https://git.kernel.org/stable/c/40714daf4d0448e1692c78563faf0ed0f9d9b5c7
Patch
https://git.kernel.org/stable/c/452ad54f432675982cc0d6eb6c40a6c86ac61dbd
Patch
https://git.kernel.org/stable/c/cd08d390d15b204cac1d3174f5f149a20c52e61a
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability