CVE-2025-40269 - CVE House
Back to Database
Status published Unknown CVE-2025-40269

ALSA: usb-audio: Fix potential overflow of PCM transfer buffer

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential overflow of PCM transfer buffer The PCM stream data in USB-audio driver is transferred over USB URB packet buffers, and each packet size is determined dynamically. The packet sizes are limited by some factors such as wMaxPacketSize USB descriptor. OTOH, in the current code, the actually used packet sizes are determined only by the rate and the PPS, which may be bigger than the size limit above. This results in a buffer overflow, as reported by syzbot. Basically when the limit is smaller than the calculated packet size, it implies that something is wrong, most likely a weird USB descriptor. So the best option would be just to return an error at the parameter setup time before doing any further operations. This patch introduces such a sanity check, and returns -EINVAL when the packet size is greater than maxpacksize. The comparison with ep->packsize[1] alone should suffice since it's always equal or greater than ep->packsize[0].

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-40269

Credits & Attribution

No credits recorded in the NVD database.

References

More from Linux

View All →
CVE-2025-71315
drm/vkms: Convert to DRM's vblank timer
Unknown 0
CVE-2025-71314
drm/panthor: Recover from panthor_gpu_flush_caches() failures
Unknown 0
CVE-2025-71313
PCI: endpoint: Add missing NULL check for alloc_workqueue()
Unknown 0
CVE-2025-71312
fs/ntfs3: fix ntfs_mount_options leak in ntfs_fill_super()
Unknown 0
CVE-2025-71311
fs/ntfs3: Initialize new folios before use
Unknown 0

Affected Vendor

Affected Software

Linux
Vulnerable Versions:
02c56650f3c118d3752122996d96173d26bb13aa, 5ef30e443e6d3654cccecec99cf481a69a0a6d3b, 99703c921864a318e3e8aae74fde071b1ff35bea, 2d50acd7dbd0682a56968ad9551341d7fc5b6eaf, aba41867dd66939d336fdf604e4d73b805d8039f, d288dc74f8cf95cb7ae0aaf245b7128627a49bf3, f0bd62b64016508938df9babe47f65c2c727d25c, 4.4.229, 4.9.229, 4.14.186, 4.19.130, 5.4.49, 5.7.6, 5.8, 0, 4.4.230, 4.9.230, 4.14.188, 4.19.132, 5.4.51, 5.7.8, 5.10.247, 5.15.197, 6.1.159, 6.6.117, 6.12.59, 6.17.9, 6.18

Timeline

Official Publish: December 6th, 2025
Last Modified: June 16th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.