CVE-2025-38474

usb: net: sierra: check for no status endpoint

published July 28, 2025

CVSS
—
EPSS
0%
Percentile
6.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

usb: net: sierra: check for no status endpoint

The driver checks for having three endpoints and

having bulk in and out endpoints, but not that

the third endpoint is interrupt input.

Rectify the omission.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00177 · 6.9th percentile
Published
2025-07-28T11:21Z
EPSS history
Timeline
  • 28 JUL 11:21Z
    usb: net: sierra: check for no status endpoint
    cvelistv5