CVE-2025-40315: linux

CVSS: UnknownDeferred
AliasesUBUNTU-CVE-2025-40315DEBIAN-CVE-2025-40315
Published 08-12-2025Last modified 23-05-2026
Open JSON

Vulnerability summary

CVE-2025-40315 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.20% chance of exploitation in the next 30 days, higher than 9.4% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.20%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 42 · Related 38
DLA-4404-1DLA-4436-1MGASA-2026-0017MGASA-2026-0018OPENSUSE-SU-2026:20145-1SUSE-SU-2026:0278-1

Timeline

  1. 08-12-2025
    PublishedVulnerability first disclosed.
  2. 23-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix epfile null pointer access after ep enable. A race condition occurs when ffs_func_eps_enable() runs concurrently with ffs_data_reset(). The ffs_data_clear() called in ffs_data_reset() sets ffs->epfiles to NULL before resetting ffs->eps_count to 0, leading to a NULL pointer dereference when accessing epfile->ep in ffs_func_eps_enable() after successful usb_ep_enable(). The ffs->epfiles pointer is set to NULL in both ffs_data_clear() and ffs_data_close() functions, and its modification is protected by the spinlock ffs->eps_lock. And the whole ffs_func_eps_enable() function is also protected by ffs->eps_lock. Thus, add NULL pointer handling for ffs->epfiles in the ffs_func_eps_enable() function to fix issues

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.20%

Chance of exploitation in the next 30 days

Percentile

9%

Versus all other CVEs

30-day change

0.00 pp

From 0.20% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.20%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu154 products
  • linuxAll versions (No fix recorded) | < 5.15.0-173.183 | < 6.8.0-106.106 | < 6.17.0-14.14
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1103.110 | < 6.8.0-1050.53 | < 6.17.0-1007.7
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian1 product
  • linux< 6.1.159-1 | < 6.12.63-1 | < 6.17.8-1
Linux1 product
  • linux≥ c9fc422c9a43e3d58d246334a71f3390401781dc, < b00d2572c16e8e59e979960d3383c2ae9cebd195 | ≥ 0042178a69eb77a979e36a50dcce9794a3140ef8, < 1c0dbd240be3f87cac321b14e17979b7e9cb6a8f | ≥ 72a8aee863af099d4434314c4536d6c9a61dcf3c, < 9ec40fba7357df2d36f4c2e2f3b9b1a4fba0a272 | ≥ ebe2b1add1055b903e2acd86b290a85297edc0b3, < c53e90563bc148e4e0ad09fe130ba2246d426ea6 | ≥ ebe2b1add1055b903e2acd86b290a85297edc0b3, < fc1141a530dfc91f0ee19b7f422a2d24829584bc | ≥ ebe2b1add1055b903e2acd86b290a85297edc0b3, < d62b808d5c68a931ad0849a00a5e3be3dd7e0019 | ≥ ebe2b1add1055b903e2acd86b290a85297edc0b3, < 30880e9df27332403dd638a82c27921134b3630b | ≥ ebe2b1add1055b903e2acd86b290a85297edc0b3, < cfd6f1a7b42f62523c96d9703ef32b0dbc495ba4 | 32048f4be071f9a6966744243f1786f45bb22dc2 | cfe5f6fd335d882bcc829a1c8a7d462a455c626e | 3e078b18753669615301d946297bafd69294ad2c | ≥ 5.4.180, < 5.4.302 | ≥ 5.10.101, < 5.10.247 | ≥ 5.15.24, < 5.15.197 | ≥ 4.14.267, < 4.15 | ≥ 4.19.230, < 4.20 | ≥ 5.16.10, < 5.17 | 5.17

3 vendors · 156 products

References

37 links
Show all 37 references