CVE-2025-38729

Publication date

2025-09-04 15:33:26

Family

Linux

State

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 power domain descriptors, too UAC3 power domain descriptors need to be verified with its variable bLength for avoiding the unexpected OOB accesses by malicious firmware, too.