CVE - CVE-2025-38249

CVE-ID
CVE-2025-38249	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() In snd_usb_get_audioformat_uac3(), the length value returned from snd_usb_ctl_msg() is used directly for memory allocation without validation. This length is controlled by the USB device. The allocated buffer is cast to a uac3_cluster_header_descriptor and its fields are accessed without verifying that the buffer is large enough. If the device returns a smaller than expected length, this leads to an out-of-bounds read. Add a length check to ensure the buffer is large enough for uac3_cluster_header_descriptor.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0ee87c2814deb5e42921281116ac3abcb326880b URL:https://git.kernel.org/stable/c/0ee87c2814deb5e42921281116ac3abcb326880b MISC:https://git.kernel.org/stable/c/11e740dc1a2c8590eb7074b5c4ab921bb6224c36 URL:https://git.kernel.org/stable/c/11e740dc1a2c8590eb7074b5c4ab921bb6224c36 MISC:https://git.kernel.org/stable/c/6eb211788e1370af52a245d4d7da35c374c7b401 URL:https://git.kernel.org/stable/c/6eb211788e1370af52a245d4d7da35c374c7b401 MISC:https://git.kernel.org/stable/c/74fcb3852a2f579151ce80b9ed96cd916ba0d5d8 URL:https://git.kernel.org/stable/c/74fcb3852a2f579151ce80b9ed96cd916ba0d5d8 MISC:https://git.kernel.org/stable/c/c3fb926abe90d86f5e3055e0035f04d9892a118b URL:https://git.kernel.org/stable/c/c3fb926abe90d86f5e3055e0035f04d9892a118b MISC:https://git.kernel.org/stable/c/fb4e2a6e8f28a3c0ad382e363aeb9cd822007b8a URL:https://git.kernel.org/stable/c/fb4e2a6e8f28a3c0ad382e363aeb9cd822007b8a
Assigning CNA
kernel.org
Date Record Created
20250416	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250416)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)