CVE-2025-40016

Each Unit and Terminal within the video function is assigned a unique
identification number, the Unit ID (UID) or Terminal ID (TID), contained in
the bUnitID or bTerminalID field of the descriptor. The value 0x00 is
reserved for undefined ID,

If we add a new entity with id 0 or a duplicated ID, it will be marked as UVCINVALIDENTITY_ID.

In a previous attempt commit 3dd075fe8ebb ("media: uvcvideo: Require entities to have a non-zero unique ID"), we ignored all the invalid units, this broke a lot of non-compatible cameras. Hopefully we are more lucky this time.

This also prevents some syzkaller reproducers from triggering warnings due to a chain of entities referring to themselves. In one particular case, an Output Unit is connected to an Input Unit, both with the same ID of 1. But when looking up for the source ID of the Output Unit, that same entity is found instead of the input entity, which leads to such warnings.

In another case, a backward chain was considered finished as the source ID was 0. Later on, that entity was found, but its pads were not valid.

Here is a sample stack trace for one of those cases.

[ 20.650953] usb 1-1: new high-speed USB device number 2 using dummyhcd [ 20.830206] usb 1-1: Using ep0 maxpacket: 8 [ 20.833501] usb 1-1: config 0 descriptor?? [ 21.038518] usb 1-1: string descriptor 0 read error: -71 [ 21.038893] usb 1-1: Found UVC 0.00 device <unnamed> (2833:0201) [ 21.039299] uvcvideo 1-1:0.0: Entity type for entity Output 1 was not initialized! [ 21.041583] uvcvideo 1-1:0.0: Entity type for entity Input 1 was not initialized! [ 21.042218] ------------[ cut here ]------------ [ 21.042536] WARNING: CPU: 0 PID: 9 at drivers/media/mc/mc-entity.c:1147 mediacreatepadlink+0x2c4/0x2e0 [ 21.043195] Modules linked in: [ 21.043535] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.11.0-rc7-00030-g3480e43aeccf #444 [ 21.044101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.15.0-1 04/01/2014 [ 21.044639] Workqueue: usbhubwq hubevent [ 21.045100] RIP: 0010:mediacreatepadlink+0x2c4/0x2e0 [ 21.045508] Code: fe e8 20 01 00 00 b8 f4 ff ff ff 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 0f 0b eb e9 0f 0b eb 0a 0f 0b eb 06 <0f> 0b eb 02 0f 0b b8 ea ff ff ff eb d4 66 2e 0f 1f 84 00 00 00 00 [ 21.046801] RSP: 0018:ffffc9000004b318 EFLAGS: 00010246 [ 21.047227] RAX: ffff888004e5d458 RBX: 0000000000000000 RCX: ffffffff818fccf1 [ 21.047719] RDX: 000000000000007b RSI: 0000000000000000 RDI: ffff888004313290 [ 21.048241] RBP: ffff888004313290 R08: 0001ffffffffffff R09: 0000000000000000 [ 21.048701] R10: 0000000000000013 R11: 0001888004313290 R12: 0000000000000003 [ 21.049138] R13: ffff888004313080 R14: ffff888004313080 R15: 0000000000000000 [ 21.049648] FS: 0000000000000000(0000) GS:ffff88803ec00000(0000) knlGS:0000000000000000 [ 21.050271] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 21.050688] CR2: 0000592cc27635b0 CR3: 000000000431c000 CR4: 0000000000750ef0 [ 21.051136] PKRU: 55555554 [ 21.051331] Call Trace: [ 21.051480] <TASK> [ 21.051611] ? _warn+0xc4/0x210 [ 21.051861] ? mediacreatepadlink+0x2c4/0x2e0 [ 21.052252] ? reportbug+0x11b/0x1a0 [ 21.052540] ? tracehardirqson+0x31/0x40 [ 21.052901] ? handlebug+0x3d/0x70 [ 21.053197] ? excinvalidop+0x1a/0x50 [ 21.053511] ? asmexcinvalidop+0x1a/0x20 [ 21.053924] ? mediacreatepadlink+0x91/0x2e0 [ 21.054364] ? mediacreatepadlink+0x2c4/0x2e0 [ 21.054834] ? mediacreatepadlink+0x91/0x2e0 [ 21.055131] ? rawspinunlock+0x1e/0x40 [ 21.055441] ? _v4l2deviceregistersubdev+0x202/0x210 [ 21.055837] uvcmcregisterentities+0x358/0x400 [ 21.056144] uvcregisterchains+0x1 ---truncated---

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

a3fbc2e6bb05a3b1ea341cd29dea09b4a033727b

Fixed

f617d515d66c05e9aebc787a8fe48b7163fc7b70

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

a3fbc2e6bb05a3b1ea341cd29dea09b4a033727b

Fixed

000b2a6bed7f30e0aadfb19bce9af6458d879304

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

a3fbc2e6bb05a3b1ea341cd29dea09b4a033727b

Fixed

15c0e136bd8cd70a1136a11c7876d6aae0eef8c8

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

a3fbc2e6bb05a3b1ea341cd29dea09b4a033727b

Fixed

0f140cede24334b3ee55e3e1127071266cbb8287

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

a3fbc2e6bb05a3b1ea341cd29dea09b4a033727b

Fixed

0e2ee70291e64a30fe36960c85294726d34a103e

Affected versions

v5.*

v5.10

v5.10-rc1

v5.10-rc2

v5.10-rc3

v5.10-rc4

v5.10-rc5

v5.10-rc6

v5.10-rc7

v5.11

v5.11-rc1

v5.11-rc2

v5.11-rc3

v5.11-rc4

v5.11-rc5

v5.11-rc6

v5.11-rc7

v5.12

v5.12-rc1

v5.12-rc1-dontuse

v5.12-rc2

v5.12-rc3

v5.12-rc4

v5.12-rc5

v5.12-rc6

v5.12-rc7

v5.12-rc8

v5.13

v5.13-rc1

v5.13-rc2

v5.13-rc3

v5.13-rc4

v5.13-rc5

v5.13-rc6

v5.13-rc7

v5.14

v5.14-rc1

v5.14-rc2

v5.14-rc3

v5.14-rc4

v5.14-rc5

v5.14-rc6

v5.14-rc7

v5.15

v5.15-rc1

v5.15-rc2

v5.15-rc3

v5.15-rc4

v5.15-rc5

v5.15-rc6

v5.15-rc7

v5.16

v5.16-rc1

v5.16-rc2

v5.16-rc3

v5.16-rc4

v5.16-rc5

v5.16-rc6

v5.16-rc7

v5.16-rc8

v5.17

v5.17-rc1

v5.17-rc2

v5.17-rc3

v5.17-rc4

v5.17-rc5

v5.17-rc6

v5.17-rc7

v5.17-rc8

v5.18

v5.18-rc1

v5.18-rc2

v5.18-rc3

v5.18-rc4

v5.18-rc5

v5.18-rc6

v5.18-rc7

v5.19

v5.19-rc1

v5.19-rc2

v5.19-rc3

v5.19-rc4

v5.19-rc5

v5.19-rc6

v5.19-rc7

v5.19-rc8

v5.6

v5.6-rc2

v5.6-rc3

v5.6-rc4

v5.6-rc5

v5.6-rc6

v5.6-rc7

v5.7

v5.7-rc1

v5.7-rc2

v5.7-rc3

v5.7-rc4

v5.7-rc5

v5.7-rc6

v5.7-rc7

v5.8

v5.8-rc1

v5.8-rc2

v5.8-rc3

v5.8-rc4

v5.8-rc5

v5.8-rc6

v5.8-rc7

v5.9

v5.9-rc1

v5.9-rc2

v5.9-rc3

v5.9-rc4

v5.9-rc5

v5.9-rc6

v5.9-rc7

v5.9-rc8

v6.*

v6.0

v6.0-rc1

v6.0-rc2

v6.0-rc3

v6.0-rc4

v6.0-rc5

v6.0-rc6

v6.0-rc7

v6.1

v6.1-rc1

v6.1-rc2

v6.1-rc3

v6.1-rc4

v6.1-rc5

v6.1-rc6

v6.1-rc7

v6.1-rc8

v6.10

v6.10-rc1

v6.10-rc2

v6.10-rc3

v6.10-rc4

v6.10-rc5

v6.10-rc6

v6.10-rc7

v6.11

v6.11-rc1

v6.11-rc2

v6.11-rc3

v6.11-rc4

v6.11-rc5

v6.11-rc6

v6.11-rc7

v6.12

v6.12-rc1

v6.12-rc2

v6.12-rc3

v6.12-rc4

v6.12-rc5

v6.12-rc6

v6.12-rc7

v6.12.1

v6.12.10

v6.12.11

v6.12.12

v6.12.13

v6.12.14

v6.12.15

v6.12.16

v6.12.17

v6.12.18

v6.12.19

v6.12.2

v6.12.20

v6.12.21

v6.12.22

v6.12.23

v6.12.24

v6.12.25

v6.12.26

v6.12.27

v6.12.28

v6.12.29

v6.12.3

v6.12.30

v6.12.31

v6.12.32

v6.12.33

v6.12.34

v6.12.35

v6.12.36

v6.12.37

v6.12.38

v6.12.39

v6.12.4

v6.12.40

v6.12.41

v6.12.42

v6.12.43

v6.12.44

v6.12.45

v6.12.46

v6.12.47

v6.12.48

v6.12.49

v6.12.5

v6.12.50

v6.12.6

v6.12.7

v6.12.8

v6.12.9

v6.13

v6.13-rc1

v6.13-rc2

v6.13-rc3

v6.13-rc4

v6.13-rc5

v6.13-rc6

v6.13-rc7

v6.14

v6.14-rc1

v6.14-rc2

v6.14-rc3

v6.14-rc4

v6.14-rc5

v6.14-rc6

v6.14-rc7

v6.15

v6.15-rc1

v6.15-rc2

v6.15-rc3

v6.15-rc4

v6.15-rc5

v6.15-rc6

v6.15-rc7

v6.16

v6.16-rc1

v6.16-rc2

v6.16-rc3

v6.16-rc4

v6.16-rc5

v6.16-rc6

v6.16-rc7

v6.16.1

v6.16.10

v6.16.2

v6.16.3

v6.16.4

v6.16.5

v6.16.6

v6.16.7

v6.16.8

v6.16.9

v6.17

v6.17-rc1

v6.17-rc2

v6.17-rc3

v6.17-rc4

v6.17-rc5

v6.17-rc6

v6.17-rc7

v6.2

v6.2-rc1

v6.2-rc2

v6.2-rc3

v6.2-rc4

v6.2-rc5

v6.2-rc6

v6.2-rc7

v6.2-rc8

v6.3

v6.3-rc1

v6.3-rc2

v6.3-rc3

v6.3-rc4

v6.3-rc5

v6.3-rc6

v6.3-rc7

v6.4

v6.4-rc1

v6.4-rc2

v6.4-rc3

v6.4-rc4

v6.4-rc5

v6.4-rc6

v6.4-rc7

v6.5

v6.5-rc1

v6.5-rc2

v6.5-rc3

v6.5-rc4

v6.5-rc5

v6.5-rc6

v6.5-rc7

v6.6

v6.6-rc1

v6.6-rc2

v6.6-rc3

v6.6-rc4

v6.6-rc5

v6.6-rc6

v6.6-rc7

v6.6.1

v6.6.10

v6.6.100

v6.6.101

v6.6.102

v6.6.103

v6.6.104

v6.6.105

v6.6.106

v6.6.107

v6.6.108

v6.6.109

v6.6.11

v6.6.12

v6.6.13

v6.6.14

v6.6.15

v6.6.16

v6.6.17

v6.6.18

v6.6.19

v6.6.2

v6.6.20

v6.6.21

v6.6.22

v6.6.23

v6.6.24

v6.6.25

v6.6.26

v6.6.27

v6.6.28

v6.6.29

v6.6.3

v6.6.30

v6.6.31

v6.6.32

v6.6.33

v6.6.34

v6.6.35

v6.6.36

v6.6.37

v6.6.38

v6.6.39

v6.6.4

v6.6.40

v6.6.41

v6.6.42

v6.6.43

v6.6.44

v6.6.45

v6.6.46

v6.6.47

v6.6.48

v6.6.49

v6.6.5

v6.6.50

v6.6.51

v6.6.52

v6.6.53

v6.6.54

v6.6.55

v6.6.56

v6.6.57

v6.6.58

v6.6.59

v6.6.6

v6.6.60

v6.6.61

v6.6.62

v6.6.63

v6.6.64

v6.6.65

v6.6.66

v6.6.67

v6.6.68

v6.6.69

v6.6.7

v6.6.70

v6.6.71

v6.6.72

v6.6.73

v6.6.74

v6.6.75

v6.6.76

v6.6.77

v6.6.78

v6.6.79

v6.6.8

v6.6.80

v6.6.81

v6.6.82

v6.6.83

v6.6.84

v6.6.85

v6.6.86

v6.6.87

v6.6.88

v6.6.89

v6.6.9

v6.6.90

v6.6.91

v6.6.92

v6.6.93

v6.6.94

v6.6.95

v6.6.96

v6.6.97

v6.6.98

v6.6.99

v6.7

v6.7-rc1

v6.7-rc2

v6.7-rc3

v6.7-rc4

v6.7-rc5

v6.7-rc6

v6.7-rc7

v6.7-rc8

v6.8

v6.8-rc1

v6.8-rc2

v6.8-rc3

v6.8-rc4

v6.8-rc5

v6.8-rc6

v6.8-rc7

v6.9

v6.9-rc1

v6.9-rc2

v6.9-rc3

v6.9-rc4

v6.9-rc5

v6.9-rc6

v6.9-rc7

Database specific

vanir_signatures

[
    {
        "digest": {
            "line_hashes": [
                "41141866551649161505388675618657028592",
                "104704600346876829119209230535351045534",
                "240193514020646783611245326444070079236",
                "37475333266791274148729018318352346752",
                "172176986272538851884550771177630246633",
                "191658870790762548525518859744417226196",
                "104134624014909435026398758819168611204",
                "108310990599605720242922915166096195990",
                "115873350753526808134265310801711293671",
                "292824107309803552694195732505504749101",
                "122087222358089418893603610835555672448",
                "112477139498196992903530431649293223411",
                "284246153540513609832239717640476903765",
                "95882845690842569178294486751895908093",
                "218958188351845542566923000948819909406",
                "138773050315247113646178113567140137370",
                "78589267908809993810475052354033547327",
                "162917962702209376466002392687248307139",
                "270643589340071182376589182599537341210",
                "4662390651826887765691458255958766595",
                "309225663175764060595365165872980404065",
                "121803714524768664213052220961767979972",
                "136009524973264652272070923332965898956",
                "203621266591752613419851750724490242528",
                "155662068320619134485737944281509457872",
                "187229218635321894599543336106507928424",
                "211444869660866890401087328240739363835",
                "51629919716284067838127459781154517909",
                "167534241989959509863586588076883750647",
                "302268949148854498925792886143023776334",
                "106197627765202260225339514358035782269",
                "154999535719966563037819863068434859238",
                "205598681504743577216493450696075625856",
                "306729432997451686565657483723541484500",
                "221050060692191960325159403931007400074",
                "264201591496769236690701165152657760092",
                "56848463474297719836408166088742991657",
                "74922024766595161104389888871311038048",
                "139947182851357032348186238079621139232",
                "52994855680285934093787585746195367281",
                "279144931868810681572864184789750106116",
                "195826204584208315789891579864190310707",
                "171228484101958743964727324733969917487",
                "33596362838726949656380526955628893816",
                "280859945258019248270592685796859762830",
                "327344770323979823632487497801186045864",
                "183623594692398368283377286840070704263",
                "25731294470398642184395492657745974388",
                "15418079056638191589408923442396744690",
                "308385522655113277499803135906038217002",
                "115013361471612216110711299526802008312",
                "151483483449477059504994911695886692897",
                "194587710206313884341640965321404090792",
                "228195701426650047502859549939997098842",
                "136009524973264652272070923332965898956",
                "203621266591752613419851750724490242528",
                "47243475600112209362444391399711573387",
                "117672073018846756516172853446868898463",
                "298131226510579480905945698868585300350",
                "295265609217780755271006654555619635316",
                "120969603723863097067070514251512125818",
                "297553424462776588263123450573809096357"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "drivers/media/usb/uvc/uvc_driver.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@000b2a6bed7f30e0aadfb19bce9af6458d879304",
        "id": "CVE-2025-40016-08f5177a",
        "signature_type": "Line"
    },
    {
        "digest": {
            "length": 1339.0,
            "function_hash": "137389944063405761639473641915910570937"
        },
        "target": {
            "function": "uvc_parse_vendor_control",
            "file": "drivers/media/usb/uvc/uvc_driver.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f617d515d66c05e9aebc787a8fe48b7163fc7b70",
        "id": "CVE-2025-40016-2818fd0c",
        "signature_type": "Function"
    },
    {
        "digest": {
            "length": 1269.0,
            "function_hash": "303115690693405320327057465580222522698"
        },
        "target": {
            "function": "uvc_alloc_entity",
            "file": "drivers/media/usb/uvc/uvc_driver.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@000b2a6bed7f30e0aadfb19bce9af6458d879304",
        "id": "CVE-2025-40016-28b06d32",
        "signature_type": "Function"
    },
    {
        "digest": {
            "length": 6303.0,
            "function_hash": "98296110539645668713121698289989494814"
        },
        "target": {
            "function": "uvc_parse_standard_control",
            "file": "drivers/media/usb/uvc/uvc_driver.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0f140cede24334b3ee55e3e1127071266cbb8287",
        "id": "CVE-2025-40016-2d009684",
        "signature_type": "Function"
    },
    {
        "digest": {
            "length": 1269.0,
            "function_hash": "303115690693405320327057465580222522698"
        },
        "target": {
            "function": "uvc_alloc_entity",
            "file": "drivers/media/usb/uvc/uvc_driver.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f617d515d66c05e9aebc787a8fe48b7163fc7b70",
        "id": "CVE-2025-40016-32d9131e",
        "signature_type": "Function"
    },
    {
        "digest": {
            "length": 929.0,
            "function_hash": "53669530083336512264355338150987999766"
        },
        "target": {
            "function": "uvc_gpio_parse",
            "file": "drivers/media/usb/uvc/uvc_driver.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0f140cede24334b3ee55e3e1127071266cbb8287",
        "id": "CVE-2025-40016-428a949f",
        "signature_type": "Function"
    },
    {
        "digest": {
            "length": 1269.0,
            "function_hash": "303115690693405320327057465580222522698"
        },
        "target": {
            "function": "uvc_alloc_entity",
            "file": "drivers/media/usb/uvc/uvc_driver.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0e2ee70291e64a30fe36960c85294726d34a103e",
        "id": "CVE-2025-40016-491de9ad",
        "signature_type": "Function"
    },
    {
        "digest": {
            "length": 1269.0,
            "function_hash": "303115690693405320327057465580222522698"
        },
        "target": {
            "function": "uvc_alloc_entity",
            "file": "drivers/media/usb/uvc/uvc_driver.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0f140cede24334b3ee55e3e1127071266cbb8287",
        "id": "CVE-2025-40016-49849660",
        "signature_type": "Function"
    },
    {
        "digest": {
            "length": 1339.0,
            "function_hash": "137389944063405761639473641915910570937"
        },
        "target": {
            "function": "uvc_parse_vendor_control",
            "file": "drivers/media/usb/uvc/uvc_driver.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@000b2a6bed7f30e0aadfb19bce9af6458d879304",
        "id": "CVE-2025-40016-5495fdf3",
        "signature_type": "Function"
    },
    {
        "digest": {
            "length": 183.0,
            "function_hash": "85969074763600154408501062549232271704"
        },
        "target": {
            "function": "uvc_entity_by_id",
            "file": "drivers/media/usb/uvc/uvc_driver.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f617d515d66c05e9aebc787a8fe48b7163fc7b70",
        "id": "CVE-2025-40016-674f4b8c",
        "signature_type": "Function"
    },
    {
        "digest": {
            "length": 6303.0,
            "function_hash": "98296110539645668713121698289989494814"
        },
        "target": {
            "function": "uvc_parse_standard_control",
            "file": "drivers/media/usb/uvc/uvc_driver.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@000b2a6bed7f30e0aadfb19bce9af6458d879304",
        "id": "CVE-2025-40016-67642e91",
        "signature_type": "Function"
    },
    {
        "digest": {
            "length": 6303.0,
            "function_hash": "98296110539645668713121698289989494814"
        },
        "target": {
            "function": "uvc_parse_standard_control",
            "file": "drivers/media/usb/uvc/uvc_driver.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0e2ee70291e64a30fe36960c85294726d34a103e",
        "id": "CVE-2025-40016-70e85b44",
        "signature_type": "Function"
    },
    {
        "digest": {
            "length": 183.0,
            "function_hash": "85969074763600154408501062549232271704"
        },
        "target": {
            "function": "uvc_entity_by_id",
            "file": "drivers/media/usb/uvc/uvc_driver.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0e2ee70291e64a30fe36960c85294726d34a103e",
        "id": "CVE-2025-40016-72c1d390",
        "signature_type": "Function"
    },
    {
        "digest": {
            "length": 836.0,
            "function_hash": "148425853802661650694852279362512945028"
        },
        "target": {
            "function": "uvc_gpio_parse",
            "file": "drivers/media/usb/uvc/uvc_driver.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f617d515d66c05e9aebc787a8fe48b7163fc7b70",
        "id": "CVE-2025-40016-7a407c44",
        "signature_type": "Function"
    },
    {
        "digest": {
            "length": 183.0,
            "function_hash": "85969074763600154408501062549232271704"
        },
        "target": {
            "function": "uvc_entity_by_id",
            "file": "drivers/media/usb/uvc/uvc_driver.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0f140cede24334b3ee55e3e1127071266cbb8287",
        "id": "CVE-2025-40016-82320435",
        "signature_type": "Function"
    },
    {
        "digest": {
            "length": 6303.0,
            "function_hash": "98296110539645668713121698289989494814"
        },
        "target": {
            "function": "uvc_parse_standard_control",
            "file": "drivers/media/usb/uvc/uvc_driver.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f617d515d66c05e9aebc787a8fe48b7163fc7b70",
        "id": "CVE-2025-40016-8b23eb3a",
        "signature_type": "Function"
    },
    {
        "digest": {
            "line_hashes": [
                "41141866551649161505388675618657028592",
                "104704600346876829119209230535351045534",
                "240193514020646783611245326444070079236",
                "37475333266791274148729018318352346752",
                "172176986272538851884550771177630246633",
                "191658870790762548525518859744417226196",
                "104134624014909435026398758819168611204",
                "108310990599605720242922915166096195990",
                "115873350753526808134265310801711293671",
                "292824107309803552694195732505504749101",
                "122087222358089418893603610835555672448",
                "112477139498196992903530431649293223411",
                "284246153540513609832239717640476903765",
                "95882845690842569178294486751895908093",
                "218958188351845542566923000948819909406",
                "138773050315247113646178113567140137370",
                "78589267908809993810475052354033547327",
                "162917962702209376466002392687248307139",
                "270643589340071182376589182599537341210",
                "4662390651826887765691458255958766595",
                "309225663175764060595365165872980404065",
                "121803714524768664213052220961767979972",
                "136009524973264652272070923332965898956",
                "203621266591752613419851750724490242528",
                "155662068320619134485737944281509457872",
                "187229218635321894599543336106507928424",
                "211444869660866890401087328240739363835",
                "51629919716284067838127459781154517909",
                "167534241989959509863586588076883750647",
                "302268949148854498925792886143023776334",
                "106197627765202260225339514358035782269",
                "154999535719966563037819863068434859238",
                "205598681504743577216493450696075625856",
                "306729432997451686565657483723541484500",
                "221050060692191960325159403931007400074",
                "264201591496769236690701165152657760092",
                "56848463474297719836408166088742991657",
                "74922024766595161104389888871311038048",
                "139947182851357032348186238079621139232",
                "52994855680285934093787585746195367281",
                "279144931868810681572864184789750106116",
                "195826204584208315789891579864190310707",
                "171228484101958743964727324733969917487",
                "33596362838726949656380526955628893816",
                "280859945258019248270592685796859762830",
                "327344770323979823632487497801186045864",
                "183623594692398368283377286840070704263",
                "25731294470398642184395492657745974388",
                "15418079056638191589408923442396744690",
                "308385522655113277499803135906038217002",
                "115013361471612216110711299526802008312",
                "151483483449477059504994911695886692897",
                "194587710206313884341640965321404090792",
                "228195701426650047502859549939997098842",
                "136009524973264652272070923332965898956",
                "203621266591752613419851750724490242528",
                "47243475600112209362444391399711573387",
                "117672073018846756516172853446868898463",
                "298131226510579480905945698868585300350",
                "295265609217780755271006654555619635316",
                "120969603723863097067070514251512125818",
                "297553424462776588263123450573809096357"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "drivers/media/usb/uvc/uvc_driver.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0f140cede24334b3ee55e3e1127071266cbb8287",
        "id": "CVE-2025-40016-8d713d6f",
        "signature_type": "Line"
    },
    {
        "digest": {
            "length": 1330.0,
            "function_hash": "37023378502694178181480304926033669735"
        },
        "target": {
            "function": "uvc_parse_vendor_control",
            "file": "drivers/media/usb/uvc/uvc_driver.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0e2ee70291e64a30fe36960c85294726d34a103e",
        "id": "CVE-2025-40016-9e94b98e",
        "signature_type": "Function"
    },
    {
        "digest": {
            "length": 836.0,
            "function_hash": "148425853802661650694852279362512945028"
        },
        "target": {
            "function": "uvc_gpio_parse",
            "file": "drivers/media/usb/uvc/uvc_driver.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@000b2a6bed7f30e0aadfb19bce9af6458d879304",
        "id": "CVE-2025-40016-a4824124",
        "signature_type": "Function"
    },
    {
        "digest": {
            "length": 183.0,
            "function_hash": "85969074763600154408501062549232271704"
        },
        "target": {
            "function": "uvc_entity_by_id",
            "file": "drivers/media/usb/uvc/uvc_driver.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@000b2a6bed7f30e0aadfb19bce9af6458d879304",
        "id": "CVE-2025-40016-b0c4782d",
        "signature_type": "Function"
    },
    {
        "digest": {
            "line_hashes": [
                "41141866551649161505388675618657028592",
                "104704600346876829119209230535351045534",
                "240193514020646783611245326444070079236",
                "37475333266791274148729018318352346752",
                "172176986272538851884550771177630246633",
                "191658870790762548525518859744417226196",
                "104134624014909435026398758819168611204",
                "108310990599605720242922915166096195990",
                "115873350753526808134265310801711293671",
                "292824107309803552694195732505504749101",
                "122087222358089418893603610835555672448",
                "112477139498196992903530431649293223411",
                "284246153540513609832239717640476903765",
                "95882845690842569178294486751895908093",
                "218958188351845542566923000948819909406",
                "138773050315247113646178113567140137370",
                "78589267908809993810475052354033547327",
                "162917962702209376466002392687248307139",
                "270643589340071182376589182599537341210",
                "4662390651826887765691458255958766595",
                "309225663175764060595365165872980404065",
                "121803714524768664213052220961767979972",
                "136009524973264652272070923332965898956",
                "203621266591752613419851750724490242528",
                "155662068320619134485737944281509457872",
                "187229218635321894599543336106507928424",
                "211444869660866890401087328240739363835",
                "51629919716284067838127459781154517909",
                "167534241989959509863586588076883750647",
                "302268949148854498925792886143023776334",
                "106197627765202260225339514358035782269",
                "154999535719966563037819863068434859238",
                "205598681504743577216493450696075625856",
                "306729432997451686565657483723541484500",
                "221050060692191960325159403931007400074",
                "264201591496769236690701165152657760092",
                "56848463474297719836408166088742991657",
                "74922024766595161104389888871311038048",
                "139947182851357032348186238079621139232",
                "52994855680285934093787585746195367281",
                "279144931868810681572864184789750106116",
                "195826204584208315789891579864190310707",
                "171228484101958743964727324733969917487",
                "33596362838726949656380526955628893816",
                "280859945258019248270592685796859762830",
                "327344770323979823632487497801186045864",
                "183623594692398368283377286840070704263",
                "25731294470398642184395492657745974388",
                "15418079056638191589408923442396744690",
                "308385522655113277499803135906038217002",
                "115013361471612216110711299526802008312",
                "151483483449477059504994911695886692897",
                "194587710206313884341640965321404090792",
                "228195701426650047502859549939997098842",
                "136009524973264652272070923332965898956",
                "203621266591752613419851750724490242528",
                "47243475600112209362444391399711573387",
                "117672073018846756516172853446868898463",
                "298131226510579480905945698868585300350",
                "295265609217780755271006654555619635316",
                "120969603723863097067070514251512125818",
                "297553424462776588263123450573809096357"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "drivers/media/usb/uvc/uvc_driver.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0e2ee70291e64a30fe36960c85294726d34a103e",
        "id": "CVE-2025-40016-bad8761e",
        "signature_type": "Line"
    },
    {
        "digest": {
            "line_hashes": [
                "41141866551649161505388675618657028592",
                "104704600346876829119209230535351045534",
                "240193514020646783611245326444070079236",
                "37475333266791274148729018318352346752",
                "172176986272538851884550771177630246633",
                "191658870790762548525518859744417226196",
                "104134624014909435026398758819168611204",
                "108310990599605720242922915166096195990",
                "115873350753526808134265310801711293671",
                "292824107309803552694195732505504749101",
                "122087222358089418893603610835555672448",
                "112477139498196992903530431649293223411",
                "284246153540513609832239717640476903765",
                "95882845690842569178294486751895908093",
                "218958188351845542566923000948819909406",
                "138773050315247113646178113567140137370",
                "78589267908809993810475052354033547327",
                "162917962702209376466002392687248307139",
                "270643589340071182376589182599537341210",
                "4662390651826887765691458255958766595",
                "309225663175764060595365165872980404065",
                "121803714524768664213052220961767979972",
                "136009524973264652272070923332965898956",
                "203621266591752613419851750724490242528",
                "155662068320619134485737944281509457872",
                "187229218635321894599543336106507928424",
                "211444869660866890401087328240739363835",
                "51629919716284067838127459781154517909",
                "167534241989959509863586588076883750647",
                "302268949148854498925792886143023776334",
                "106197627765202260225339514358035782269",
                "154999535719966563037819863068434859238",
                "205598681504743577216493450696075625856",
                "306729432997451686565657483723541484500",
                "221050060692191960325159403931007400074",
                "264201591496769236690701165152657760092",
                "56848463474297719836408166088742991657",
                "74922024766595161104389888871311038048",
                "139947182851357032348186238079621139232",
                "52994855680285934093787585746195367281",
                "279144931868810681572864184789750106116",
                "195826204584208315789891579864190310707",
                "171228484101958743964727324733969917487",
                "33596362838726949656380526955628893816",
                "280859945258019248270592685796859762830",
                "327344770323979823632487497801186045864",
                "183623594692398368283377286840070704263",
                "25731294470398642184395492657745974388",
                "15418079056638191589408923442396744690",
                "308385522655113277499803135906038217002",
                "115013361471612216110711299526802008312",
                "151483483449477059504994911695886692897",
                "194587710206313884341640965321404090792",
                "228195701426650047502859549939997098842",
                "136009524973264652272070923332965898956",
                "203621266591752613419851750724490242528",
                "47243475600112209362444391399711573387",
                "117672073018846756516172853446868898463",
                "298131226510579480905945698868585300350",
                "295265609217780755271006654555619635316",
                "120969603723863097067070514251512125818",
                "297553424462776588263123450573809096357"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "drivers/media/usb/uvc/uvc_driver.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f617d515d66c05e9aebc787a8fe48b7163fc7b70",
        "id": "CVE-2025-40016-be04e3a2",
        "signature_type": "Line"
    },
    {
        "digest": {
            "length": 929.0,
            "function_hash": "53669530083336512264355338150987999766"
        },
        "target": {
            "function": "uvc_gpio_parse",
            "file": "drivers/media/usb/uvc/uvc_driver.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0e2ee70291e64a30fe36960c85294726d34a103e",
        "id": "CVE-2025-40016-ca6eea2b",
        "signature_type": "Function"
    },
    {
        "digest": {
            "length": 1339.0,
            "function_hash": "137389944063405761639473641915910570937"
        },
        "target": {
            "function": "uvc_parse_vendor_control",
            "file": "drivers/media/usb/uvc/uvc_driver.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0f140cede24334b3ee55e3e1127071266cbb8287",
        "id": "CVE-2025-40016-d8656e04",
        "signature_type": "Function"
    }
]

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

5.7.0

Fixed

6.6.110

Type: ECOSYSTEM
Events: Introduced

6.7.0

Fixed

6.12.51

Type: ECOSYSTEM
Events: Introduced

6.13.0

Fixed

6.16.11

Type: ECOSYSTEM
Events: Introduced

6.17.0

Fixed

6.17.1