Vulnerability in Linux

CVE-2025-40116

In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup The kthread_run() function returns error pointers so the max3421_hcd->spi_thread pointer can be either error pointers or NULL. Check for both before dereferencing it.

EPSS: 0.002 (11.7th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 05dfa5c9bc37933181b619e42ec0eeb41ef31362, 3.16, 0

References