SB2025103124 - NULL pointer dereference in Linux kernel gadget function driver
Published: October 31, 2025
Security Bulletin ID
SB2025103124
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) NULL pointer dereference (CVE-ID: CVE-2025-40095)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to NULL pointer dereference within the rndis_bind() function in drivers/usb/gadget/function/f_rndis.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/08228941436047bdcd35a612c1aec0912a29d8cd
- https://git.kernel.org/stable/c/380353c3a92be7d928e6f973bd065c5b79755ac3
- https://git.kernel.org/stable/c/5f65c8ad8c7292ed7e3716343fcd590a51818cc3
- https://git.kernel.org/stable/c/a8366263b7e5b663d7fb489d3a9ba1e2600049a6
- https://git.kernel.org/stable/c/ef81226bb1f8b6e761cd0b53d2696e9c1bc955d1