CVE-2025-40094 | Linux Kernel up to 5.15.195/6.1.157/6.6.113/6.12.54/6.17.4 usb __free null pointer dereference

October 30, 2025 Yanac

A vulnerability has been found in Linux Kernel up to 5.15.195/6.1.157/6.6.113/6.12.54/6.17.4 and classified as critical. The impacted element is the function __free of the component usb. The manipulation leads to null pointer dereference.

This vulnerability is uniquely identified as CVE-2025-40094. The attack can only be initiated within the local network. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More