CVE-2025-40095 | Linux Kernel up to 6.1.157/6.6.113/6.12.54/6.17.4 usb __free null pointer dereference

October 30, 2025 Yanac

A vulnerability was found in Linux Kernel up to 6.1.157/6.6.113/6.12.54/6.17.4 and classified as critical. This affects the function __free of the component usb. The manipulation results in null pointer dereference.

This vulnerability was named CVE-2025-40095. The attack needs to be approached within the local network. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More