CVE-2025-40116 | Linux Kernel up to 6.17.2 usb kthread_run null pointer dereference

November 12, 2025 Yanac

A vulnerability described as critical has been identified in Linux Kernel up to 6.17.2. This vulnerability affects the function kthread_run of the component usb. The manipulation results in null pointer dereference.

This vulnerability was named CVE-2025-40116. The attack needs to be approached within the local network. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More