CVE-2025-39757: ALSA: usb-audio: Validate UAC3 cluster segment descriptors
Published Sep 11, 2025
·Updated
ALSA: usb-audio: Validate UAC3 cluster segment descriptors
Affected Software
14 affected componentsFixes available
Linux Kernel
Microsoft azl3 kernel 6.6.96.2-2
Microsoft cbl2 kernel 5.15.186.1-1
Linux Linux kernel>=4.19<5.4.297
Linux Linux kernel>=5.5<5.10.241
Linux Linux kernel>=5.11<5.15.190
Linux Linux kernel>=5.16<6.1.149
Linux Linux kernel>=6.2<6.6.103
Linux Linux kernel>=6.7<6.12.43
Linux Linux kernel>=6.13<6.15.11
Linux Linux kernel>=6.16<6.16.2
Linux Linux kernel=6.17-rc1
Debian Debian Linux=11.0
IBM Cloud Pak for Data System<=11.3.0.2-IF1
Event History
Sep 11, 2025
CVE Published
via MITRE·04:52 PM
Data Sourced
via MITRE·04:52 PM
Description
Data Sourced
via Red Hat·05:02 PM
DescriptionSeverityAffected Software
Data Sourced
via NVD·05:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Sep 13, 2025
Data Sourced
via Microsoft·01:04 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·08:04 AM
DescriptionSeverity
Updated
via Microsoft·08:04 AM
SeverityAffected Software
Aug 28, 2026
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-39757?
CVE-2025-39757 has been classified as having a medium severity level due to potential buffer overflow risks.
2
How do I fix CVE-2025-39757?
To resolve CVE-2025-39757, update your Linux kernel to a version that includes the security patch for this vulnerability.
3
What circumstances can lead to exploitation of CVE-2025-39757?
CVE-2025-39757 can be exploited if an attacker is able to send malformed UAC3 class descriptors to a vulnerable system.
4
Which versions of the Linux kernel are affected by CVE-2025-39757?
CVE-2025-39757 affects certain versions of the Linux kernel prior to the patch that resolves the UAC3 cluster segment descriptor validation issue.
5
What components of the Linux kernel are related to CVE-2025-39757?
CVE-2025-39757 specifically impacts the ALSA usb-audio subsystem within the Linux kernel.