CVE-2025-40314

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the Linux kernel’s USB subsystem, specifically within the cdns3 gadget driver. The issue occurs in the cdnsp gadget init() and cdnsp gadget exit() functions, where the gadget structure is freed before its endpoints, leading to dangling pointers in the endpoint list. Subsequently freeing the endpoints results in a use-after-free condition. The fix involves separating the usb del gadget udc() operation into distinct "del" and "put" steps, ensuring that endpoints are freed before the gadget structure is released.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.