CVE-2025-38249: debian debian_linux Out-of-bounds Read

Vulnerability summary

CVE-2025-38249 is a high (CVSS 7.1) Out-of-bounds Read vulnerability in debian debian_linux. EPSS estimates a 0.19% chance of exploitation in the next 30 days, higher than 7.6% of scored vulnerabilities.

Timeline

1. 09-07-2025
   PublishedVulnerability first disclosed.
2. 11-05-2026
   Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() In snd_usb_get_audioformat_uac3(), the length value returned from snd_usb_ctl_msg() is used directly for memory allocation without validation. This length is controlled by the USB device. The allocated buffer is cast to a uac3_cluster_header_descriptor and its fields are accessed without verifying that the buffer is large enough. If the device returns a smaller than expected length, this leads to an out-of-bounds read. Add a length check to ensure the buffer is large enough for uac3_cluster_header_descriptor.

• CWE-125Out-of-bounds ReadThe product reads data past the end, or before the beginning, of the intended buffer.