CVE-2025-40093
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-40093
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-40093.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-40093
- Downstream
- Related
- Published
- 2025-10-30T09:48:00.807Z
- Modified
- 2025-11-27T02:33:41.734557Z
- Summary
- usb: gadget: f_ecm: Refactor bind path to use __free()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: fecm: Refactor bind path to use _free()
After an bind/unbind cycle, the ecm->notifyreq is left stale. If a subsequent bind fails, the unified error label attempts to free this stale request, leading to a NULL pointer dereference when accessing ep->ops->freerequest.
Refactor the error handling in the bind path to use the __free() automatic cleanup mechanism.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/blob/cc431b3424123d84bcd7afd4de150b33f117a8ef/cves/2025/40xxx/CVE-2025-40093.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/070f341d86cf2c098d63e484a86c7c1d2696a868
- https://git.kernel.org/stable/c/15b9faf53ba8719700596e7ef78879ce200e8c2e
- https://git.kernel.org/stable/c/42988380ac67c76bb9dff8f77d7ef3eefd50b7b5
- https://git.kernel.org/stable/c/4630c68bade82f087eaaab22e9a361da2f18d139
- https://git.kernel.org/stable/c/d3745aaef19198d0c81637a7dd50ef53c4f879b7
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedda741b8c56d612b5dd26ffa31341911a5fea23eeFixedd3745aaef19198d0c81637a7dd50ef53c4f879b7
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedda741b8c56d612b5dd26ffa31341911a5fea23eeFixed070f341d86cf2c098d63e484a86c7c1d2696a868
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedda741b8c56d612b5dd26ffa31341911a5fea23eeFixed15b9faf53ba8719700596e7ef78879ce200e8c2e
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedda741b8c56d612b5dd26ffa31341911a5fea23eeFixed4630c68bade82f087eaaab22e9a361da2f18d139
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedda741b8c56d612b5dd26ffa31341911a5fea23eeFixed42988380ac67c76bb9dff8f77d7ef3eefd50b7b5