In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: fecm: Refactor bind path to use _free()
After an bind/unbind cycle, the ecm->notifyreq is left stale. If a subsequent bind fails, the unified error label attempts to free this stale request, leading to a NULL pointer dereference when accessing ep->ops->freerequest.
Refactor the error handling in the bind path to use the __free() automatic cleanup mechanism.
[
{
"id": "CVE-2025-40093-06d92131",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"136957853545070866518785207686950421353",
"22001295017872420675850276067769186823",
"192014958669386631403941437416378267520",
"176475990873667193909728842532350104860",
"267756992112573876530051996451322480897",
"168341343587786890816543746308169737641",
"299038969044392194930239580407107314318",
"83046426187934998649646696889565665424",
"299636866797378168063161732801548243617",
"339969125823141376843813175967037002995",
"250237816230260890953664507245793966475",
"244578872407155129191305345282736360498",
"290506318864202365594382678332199664527",
"7358198726281288798341127211990168427",
"223401042046662524719134592428186826408",
"258347662661116292359685480309941255417",
"36853743493262272276626148438232556314",
"239350592228086348974982980505467612249",
"36304132999806475478149890631831833453",
"238283186680964883335262850914370002513",
"201345795041120735495411060183113714039",
"297920365684587286014286498955240450644",
"110961238959576238417490265313877128776",
"276849661912727732212225188509744635141",
"131192897866121183035266959828344221880",
"294202267962477182782068626172281195426",
"284114435573726229673531468017163213842",
"311843631328882778411999077988841754318",
"139779928852970772710124517913065380191",
"61570953565930115207756559112056003906",
"7712896513930736284521480183091888159",
"145054803679789983510263733006990534945",
"37762378445114251054439003035803771268",
"254687391467833303120731995339853956997",
"99843147724614837269889411867148046912",
"262894455156397323292730938220757785285",
"144099284366512550017640184107243467173",
"242324359117811521038178972666780694598",
"30110722793716683786468535409431445422",
"62974123773928220804688901850163783013",
"140371479582715669898320088339626432823",
"236308034099963883929770112677531675618",
"141260007927074815869905374701282972848",
"136055653379104013050776763251119466585",
"90124975248373973327625182026404642220",
"186128540200675217343415204455181046040",
"261360863499664359239257739944167013293",
"66352891990155188687325670437133293924",
"19414816378646614741732939315404205789",
"154161577424580864813792479386192058051",
"16498636270029658743362584762325941408",
"57373642306726322506997989109410061774",
"70214396644266238799561978901874321421",
"73193740280942223477538207520247045021",
"187613356602925571842769566398831623842",
"306479628263221649684155670249763018239",
"276484681108955716951303169064473486902",
"85197373540212687858743536178273955131",
"159776160624126337548430387866626379184"
],
"threshold": 0.9
},
"target": {
"file": "drivers/usb/gadget/function/f_ecm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4630c68bade82f087eaaab22e9a361da2f18d139"
},
{
"id": "CVE-2025-40093-25a5dfcb",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"136957853545070866518785207686950421353",
"160858021289713032174135741725017541634",
"131967931553721363927323232593831317484",
"167421142855313217344162429474553779436",
"281488953618971451283093792359629862283",
"272547595262068191822354799446525552996",
"332813168150856191414204881952510229652",
"299038969044392194930239580407107314318",
"83046426187934998649646696889565665424",
"299636866797378168063161732801548243617",
"339969125823141376843813175967037002995",
"250237816230260890953664507245793966475",
"244578872407155129191305345282736360498",
"290506318864202365594382678332199664527",
"7358198726281288798341127211990168427",
"223401042046662524719134592428186826408",
"258347662661116292359685480309941255417",
"36853743493262272276626148438232556314",
"239350592228086348974982980505467612249",
"36304132999806475478149890631831833453",
"238283186680964883335262850914370002513",
"201345795041120735495411060183113714039",
"297920365684587286014286498955240450644",
"110961238959576238417490265313877128776",
"276849661912727732212225188509744635141",
"131192897866121183035266959828344221880",
"294202267962477182782068626172281195426",
"284114435573726229673531468017163213842",
"311843631328882778411999077988841754318",
"139779928852970772710124517913065380191",
"61570953565930115207756559112056003906",
"7712896513930736284521480183091888159",
"145054803679789983510263733006990534945",
"37762378445114251054439003035803771268",
"254687391467833303120731995339853956997",
"99843147724614837269889411867148046912",
"262894455156397323292730938220757785285",
"144099284366512550017640184107243467173",
"242324359117811521038178972666780694598",
"30110722793716683786468535409431445422",
"62974123773928220804688901850163783013",
"140371479582715669898320088339626432823",
"236308034099963883929770112677531675618",
"141260007927074815869905374701282972848",
"136055653379104013050776763251119466585",
"90124975248373973327625182026404642220",
"330320462445410418972098154611521759571",
"135319043523117438145325571086743454057",
"320729908903815541057980795471357079058",
"59938940023368474031725834145992513153",
"252980158246501371390447730562243334165",
"44277368691517735206931123080745536861",
"154161577424580864813792479386192058051",
"16498636270029658743362584762325941408",
"57373642306726322506997989109410061774",
"70214396644266238799561978901874321421",
"73193740280942223477538207520247045021",
"187613356602925571842769566398831623842",
"306479628263221649684155670249763018239",
"276484681108955716951303169064473486902",
"85197373540212687858743536178273955131",
"159776160624126337548430387866626379184"
],
"threshold": 0.9
},
"target": {
"file": "drivers/usb/gadget/function/f_ecm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d3745aaef19198d0c81637a7dd50ef53c4f879b7"
},
{
"id": "CVE-2025-40093-25bafa47",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"136957853545070866518785207686950421353",
"22001295017872420675850276067769186823",
"192014958669386631403941437416378267520",
"176475990873667193909728842532350104860",
"267756992112573876530051996451322480897",
"168341343587786890816543746308169737641",
"299038969044392194930239580407107314318",
"83046426187934998649646696889565665424",
"299636866797378168063161732801548243617",
"339969125823141376843813175967037002995",
"250237816230260890953664507245793966475",
"244578872407155129191305345282736360498",
"290506318864202365594382678332199664527",
"7358198726281288798341127211990168427",
"223401042046662524719134592428186826408",
"258347662661116292359685480309941255417",
"36853743493262272276626148438232556314",
"239350592228086348974982980505467612249",
"36304132999806475478149890631831833453",
"238283186680964883335262850914370002513",
"201345795041120735495411060183113714039",
"297920365684587286014286498955240450644",
"110961238959576238417490265313877128776",
"276849661912727732212225188509744635141",
"131192897866121183035266959828344221880",
"294202267962477182782068626172281195426",
"284114435573726229673531468017163213842",
"311843631328882778411999077988841754318",
"139779928852970772710124517913065380191",
"61570953565930115207756559112056003906",
"7712896513930736284521480183091888159",
"145054803679789983510263733006990534945",
"37762378445114251054439003035803771268",
"254687391467833303120731995339853956997",
"99843147724614837269889411867148046912",
"262894455156397323292730938220757785285",
"144099284366512550017640184107243467173",
"242324359117811521038178972666780694598",
"30110722793716683786468535409431445422",
"62974123773928220804688901850163783013",
"140371479582715669898320088339626432823",
"236308034099963883929770112677531675618",
"141260007927074815869905374701282972848",
"136055653379104013050776763251119466585",
"90124975248373973327625182026404642220",
"186128540200675217343415204455181046040",
"261360863499664359239257739944167013293",
"66352891990155188687325670437133293924",
"19414816378646614741732939315404205789",
"154161577424580864813792479386192058051",
"16498636270029658743362584762325941408",
"57373642306726322506997989109410061774",
"70214396644266238799561978901874321421",
"73193740280942223477538207520247045021",
"187613356602925571842769566398831623842",
"306479628263221649684155670249763018239",
"276484681108955716951303169064473486902",
"85197373540212687858743536178273955131",
"159776160624126337548430387866626379184"
],
"threshold": 0.9
},
"target": {
"file": "drivers/usb/gadget/function/f_ecm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@42988380ac67c76bb9dff8f77d7ef3eefd50b7b5"
},
{
"id": "CVE-2025-40093-40ce1ff3",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "63335348884053551080940029479131644481",
"length": 2943.0
},
"target": {
"file": "drivers/usb/gadget/function/f_ecm.c",
"function": "ecm_bind"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@15b9faf53ba8719700596e7ef78879ce200e8c2e"
},
{
"id": "CVE-2025-40093-739d2da0",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "63335348884053551080940029479131644481",
"length": 2943.0
},
"target": {
"file": "drivers/usb/gadget/function/f_ecm.c",
"function": "ecm_bind"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@42988380ac67c76bb9dff8f77d7ef3eefd50b7b5"
},
{
"id": "CVE-2025-40093-7fbffdc9",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "63335348884053551080940029479131644481",
"length": 2943.0
},
"target": {
"file": "drivers/usb/gadget/function/f_ecm.c",
"function": "ecm_bind"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4630c68bade82f087eaaab22e9a361da2f18d139"
},
{
"id": "CVE-2025-40093-8d9402d8",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"136957853545070866518785207686950421353",
"160858021289713032174135741725017541634",
"131967931553721363927323232593831317484",
"167421142855313217344162429474553779436",
"281488953618971451283093792359629862283",
"267756992112573876530051996451322480897",
"168341343587786890816543746308169737641",
"299038969044392194930239580407107314318",
"83046426187934998649646696889565665424",
"299636866797378168063161732801548243617",
"339969125823141376843813175967037002995",
"250237816230260890953664507245793966475",
"244578872407155129191305345282736360498",
"290506318864202365594382678332199664527",
"7358198726281288798341127211990168427",
"223401042046662524719134592428186826408",
"258347662661116292359685480309941255417",
"36853743493262272276626148438232556314",
"239350592228086348974982980505467612249",
"36304132999806475478149890631831833453",
"238283186680964883335262850914370002513",
"201345795041120735495411060183113714039",
"297920365684587286014286498955240450644",
"110961238959576238417490265313877128776",
"276849661912727732212225188509744635141",
"131192897866121183035266959828344221880",
"294202267962477182782068626172281195426",
"284114435573726229673531468017163213842",
"311843631328882778411999077988841754318",
"139779928852970772710124517913065380191",
"61570953565930115207756559112056003906",
"7712896513930736284521480183091888159",
"145054803679789983510263733006990534945",
"37762378445114251054439003035803771268",
"254687391467833303120731995339853956997",
"99843147724614837269889411867148046912",
"262894455156397323292730938220757785285",
"144099284366512550017640184107243467173",
"242324359117811521038178972666780694598",
"30110722793716683786468535409431445422",
"62974123773928220804688901850163783013",
"140371479582715669898320088339626432823",
"236308034099963883929770112677531675618",
"141260007927074815869905374701282972848",
"136055653379104013050776763251119466585",
"90124975248373973327625182026404642220",
"186128540200675217343415204455181046040",
"261360863499664359239257739944167013293",
"66352891990155188687325670437133293924",
"19414816378646614741732939315404205789",
"154161577424580864813792479386192058051",
"16498636270029658743362584762325941408",
"57373642306726322506997989109410061774",
"70214396644266238799561978901874321421",
"73193740280942223477538207520247045021",
"187613356602925571842769566398831623842",
"306479628263221649684155670249763018239",
"276484681108955716951303169064473486902",
"85197373540212687858743536178273955131",
"159776160624126337548430387866626379184"
],
"threshold": 0.9
},
"target": {
"file": "drivers/usb/gadget/function/f_ecm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@15b9faf53ba8719700596e7ef78879ce200e8c2e"
},
{
"id": "CVE-2025-40093-9b391457",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "63335348884053551080940029479131644481",
"length": 2943.0
},
"target": {
"file": "drivers/usb/gadget/function/f_ecm.c",
"function": "ecm_bind"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@070f341d86cf2c098d63e484a86c7c1d2696a868"
},
{
"id": "CVE-2025-40093-cd97017c",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "221543163517745244830298486543639237965",
"length": 3052.0
},
"target": {
"file": "drivers/usb/gadget/function/f_ecm.c",
"function": "ecm_bind"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d3745aaef19198d0c81637a7dd50ef53c4f879b7"
},
{
"id": "CVE-2025-40093-d52edbae",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"line_hashes": [
"136957853545070866518785207686950421353",
"160858021289713032174135741725017541634",
"131967931553721363927323232593831317484",
"167421142855313217344162429474553779436",
"281488953618971451283093792359629862283",
"267756992112573876530051996451322480897",
"168341343587786890816543746308169737641",
"299038969044392194930239580407107314318",
"83046426187934998649646696889565665424",
"299636866797378168063161732801548243617",
"339969125823141376843813175967037002995",
"250237816230260890953664507245793966475",
"244578872407155129191305345282736360498",
"290506318864202365594382678332199664527",
"7358198726281288798341127211990168427",
"223401042046662524719134592428186826408",
"258347662661116292359685480309941255417",
"36853743493262272276626148438232556314",
"239350592228086348974982980505467612249",
"36304132999806475478149890631831833453",
"238283186680964883335262850914370002513",
"201345795041120735495411060183113714039",
"297920365684587286014286498955240450644",
"110961238959576238417490265313877128776",
"276849661912727732212225188509744635141",
"131192897866121183035266959828344221880",
"294202267962477182782068626172281195426",
"284114435573726229673531468017163213842",
"311843631328882778411999077988841754318",
"139779928852970772710124517913065380191",
"61570953565930115207756559112056003906",
"7712896513930736284521480183091888159",
"145054803679789983510263733006990534945",
"37762378445114251054439003035803771268",
"254687391467833303120731995339853956997",
"99843147724614837269889411867148046912",
"262894455156397323292730938220757785285",
"144099284366512550017640184107243467173",
"242324359117811521038178972666780694598",
"30110722793716683786468535409431445422",
"62974123773928220804688901850163783013",
"140371479582715669898320088339626432823",
"236308034099963883929770112677531675618",
"141260007927074815869905374701282972848",
"136055653379104013050776763251119466585",
"90124975248373973327625182026404642220",
"186128540200675217343415204455181046040",
"261360863499664359239257739944167013293",
"66352891990155188687325670437133293924",
"19414816378646614741732939315404205789",
"154161577424580864813792479386192058051",
"16498636270029658743362584762325941408",
"57373642306726322506997989109410061774",
"70214396644266238799561978901874321421",
"73193740280942223477538207520247045021",
"187613356602925571842769566398831623842",
"306479628263221649684155670249763018239",
"276484681108955716951303169064473486902",
"85197373540212687858743536178273955131",
"159776160624126337548430387866626379184"
],
"threshold": 0.9
},
"target": {
"file": "drivers/usb/gadget/function/f_ecm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@070f341d86cf2c098d63e484a86c7c1d2696a868"
}
]