VYPR
Unrated severityNVD Advisory· Published Oct 29, 2025· Updated Apr 15, 2026

CVE-2025-40085

CVE-2025-40085

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card

In try_to_register_card(), the return value of usb_ifnum_to_if() is passed directly to usb_interface_claimed() without a NULL check, which will lead to a NULL pointer dereference when creating an invalid USB audio device. Fix this by adding a check to ensure the interface pointer is valid before passing it to usb_interface_claimed().

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

114

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.