High 7.1Published Sep 11, 2025

CVE-2025-39757ALSA: usb-audio: Validate UAC3 cluster segment descriptors

Updated under an hour ago (Oct 27, 2026, 3:10 PM ET)

Does this affect you?

It affects Linux and 3 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 cluster segment descriptors UAC3 class segment descriptors need to be verified whether their sizes match with the declared lengths and whether they fit with the allocated buffer sizes, too. Otherwise malicious firmware may lead to the unexpected OOB accesses.

CVSS: 7.1 HIGH (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Jun 11, 2026
First seen by InfoSec Signals: Oct 19, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	11785ef53228d23ec386f5fe4a34601536f0c891 builds before 799c06ad4c9c790c265e8b6b94947213f1fb389c; from 11785ef53228d23ec386f5fe4a34601536f0c891 before 786571b10b1ae6d90e1242848ce78ee7e1d493c4; 11785ef53228d23ec386f5fe4a34601536f0c891 builds before 275e37532e8ebe25e8a4069b2d9f955bfd202a46; 11785ef53228d23ec386f5fe4a34601536f0c891 builds before 47ab3d820cb0a502bd0074f83bb3cf7ab5d79902; from 11785ef53228d23ec386f5fe4a34601536f0c891 before 1034719fdefd26caeec0a44a868bb5a412c2c1a5; from 11785ef53228d23ec386f5fe4a34601536f0c891 before ae17b3b5e753efc239421d186cd1ff06e5ac296e; from 11785ef53228d23ec386f5fe4a34601536f0c891 before dfdcbcde5c20df878178245d4449feada7d5b201; 11785ef53228d23ec386f5fe4a34601536f0c891 builds before 7ef3fd250f84494fb2f7871f357808edaa1fc6ce; and 1 more ranges	CNA record
Siemens SIMATIC CN 4100 siemens:simatic_cn_4100 (from the name)	before V5.0	CISA ADP
linux linux_kernel linux:linux_kernel	from 4.19 before 5.4.297; from 5.5 before 5.10.241; from 5.11 before 5.15.190; from 5.16 before 6.1.149; from 6.2 before 6.6.103; from 6.7 before 6.12.43; from 6.13 before 6.15.11; from 6.16 before 6.16.2; and 1 more ranges	NVD
debian debian_linux debian:debian_linux	11.0	NVD

References

References

https://git.kernel.org/stable/c/799c06ad4c9c790c265e8b6b94947213f1fb389c	patch
https://git.kernel.org/stable/c/786571b10b1ae6d90e1242848ce78ee7e1d493c4	patch
https://git.kernel.org/stable/c/275e37532e8ebe25e8a4069b2d9f955bfd202a46	patch
https://git.kernel.org/stable/c/47ab3d820cb0a502bd0074f83bb3cf7ab5d79902	patch
https://git.kernel.org/stable/c/1034719fdefd26caeec0a44a868bb5a412c2c1a5	patch
https://git.kernel.org/stable/c/ae17b3b5e753efc239421d186cd1ff06e5ac296e	patch
https://git.kernel.org/stable/c/dfdcbcde5c20df878178245d4449feada7d5b201	patch
https://git.kernel.org/stable/c/7ef3fd250f84494fb2f7871f357808edaa1fc6ce	patch
https://git.kernel.org/stable/c/ecfd41166b72b67d3bdeb88d224ff445f6163869	patch
https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html	mailing-list, third-party-advisory
1–10 of 12

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.