CVE-2025-38474 – Sierra USB Net Interrupt Input Endpoint Validation Vulnerability

The following table lists the changes that have been made to the
CVE-2025-38474 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Jul. 28, 2025

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved:

    usb: net: sierra: check for no status endpoint

    The driver checks for having three endpoints and
    having bulk in and out endpoints, but not that
    the third endpoint is interrupt input.
    Rectify the omission.

    Added Reference https://git.kernel.org/stable/c/4c4ca3c46167518f8534ed70f6e3b4bf86c4d158
    Added Reference https://git.kernel.org/stable/c/5849980faea1c792d1d5e54fdbf1e69ac0a9bfb9
    Added Reference https://git.kernel.org/stable/c/5dd6a441748dad2f02e27b256984ca0b2d4546b6
    Added Reference https://git.kernel.org/stable/c/65c666aff44eb7f9079c55331abd9687fb77ba2d
    Added Reference https://git.kernel.org/stable/c/bfe8ef373986e8f185d3d6613eb1801a8749837a
Share the Post:

Related Posts