NetSight
IP …
medium5.5

CVE-2025-38474

In the Linux kernel, the following vulnerability has been resolved: usb: net: sierra: check for no status endpoint The driver checks for having three endpoints…

Impact

In the Linux kernel, the following vulnerability has been resolved: usb: net: sierra: check for no status endpoint The driver checks for having three endpoints and having bulk in and out endpoints, but not that the third endpoint is interrupt input. Rectify the omission.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.35 before 5.4.297
from 5.5 before 5.10.241
from 5.11 before 5.15.190
from 5.16 before 6.1.147
from 6.2 before 6.6.100
from 6.7 before 6.12.40
DebianDebian Linux
Version 11.0

References