Riskcovery

CVE-2025-38474

usb: net: sierra: check for no status endpoint

State
Published
Severity
Not scored
Published
Jul 28, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: net: sierra: check for no status endpoint

The driver checks for having three endpoints and having bulk in and out endpoints, but not that the third endpoint is interrupt input. Rectify the omission.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • eb4fd8cd355c8ec425a12ec6cbdac614e8a4819d to before 0a263ccb905b4ae2af381cd4280bd8d2477b98b8Affected
  • eb4fd8cd355c8ec425a12ec6cbdac614e8a4819d to before 5408cc668e596c81cdd29e137225432aa40d1785Affected
  • eb4fd8cd355c8ec425a12ec6cbdac614e8a4819d to before a6a238c4126eb3ddb495d3f960193ca5bb778d92Affected
  • eb4fd8cd355c8ec425a12ec6cbdac614e8a4819d to before 5849980faea1c792d1d5e54fdbf1e69ac0a9bfb9Affected
  • eb4fd8cd355c8ec425a12ec6cbdac614e8a4819d to before 5dd6a441748dad2f02e27b256984ca0b2d4546b6Affected
  • eb4fd8cd355c8ec425a12ec6cbdac614e8a4819d to before 65c666aff44eb7f9079c55331abd9687fb77ba2dAffected
  • eb4fd8cd355c8ec425a12ec6cbdac614e8a4819d to before bfe8ef373986e8f185d3d6613eb1801a8749837aAffected
  • eb4fd8cd355c8ec425a12ec6cbdac614e8a4819d to before 4c4ca3c46167518f8534ed70f6e3b4bf86c4d158Affected
LinuxLinux
  • 2.6.34Affected
  • before 2.6.34Not affected
  • 5.4.297 through 5.4.*Not affected
  • 5.10.241 through 5.10.*Not affected
  • 5.15.190 through 5.15.*Not affected
  • 6.1.147 through 6.1.*Not affected
  • 6.6.100 through 6.6.*Not affected
  • 6.12.40 through 6.12.*Not affected
  • 6.15.8 through 6.15.*Not affected
  • 6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.