CVE-2025-38249: ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3()
ALSA: usb-audio: Fix out-of-bounds read in sndusbgetaudioformatuac3()
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
In snd_usb_get_audioformat_uac3(), validate the length returned by snd_usb_ctl_msg() before memory allocation and before casting or accessing the buffer as a uac3_cluster_header_descriptor; reject buffers smaller than the descriptor.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38249?
CVE-2025-38249 is classified as a medium severity vulnerability due to potential memory corruption risks.
How do I fix CVE-2025-38249?
To fix CVE-2025-38249, update your Linux kernel to the latest stable version that includes the patch for this vulnerability.
What systems are affected by CVE-2025-38249?
CVE-2025-38249 affects the Linux kernel, particularly those versions utilizing the ALSA usb-audio functionality.
What is the impact of CVE-2025-38249?
The impact of CVE-2025-38249 includes possible out-of-bounds memory access, which may lead to application instability or crashes.
When was CVE-2025-38249 published?
CVE-2025-38249 was published in October 2025, following the discovery and resolution of the vulnerability.