CVE-2025-40092

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's USB gadget functionality, specifically within the f ncm module. After a bind/unbind cycle, the ncm->notify req variable can become stale. A subsequent bind failure then leads to an attempt to free this stale request, resulting in a NULL pointer dereference when accessing ep->ops->free request. The issue is addressed by refactoring the error handling in the bind path to utilize the free() automatic cleanup mechanism. The vulnerability can lead to a kernel NULL pointer dereference.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.