In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Fix NULL pointer deference in trytoregister_card
In trytoregistercard(), the return value of usbifnumtoif() is passed directly to usbinterfaceclaimed() without a NULL check, which will lead to a NULL pointer dereference when creating an invalid USB audio device. Fix this by adding a check to ensure the interface pointer is valid before passing it to usbinterfaceclaimed().
[
{
"deprecated": false,
"id": "CVE-2025-40085-002b83cc",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@576312eb436326b44b7010f4d9ae2b698df075ea",
"digest": {
"threshold": 0.9,
"line_hashes": [
"146871032233152340113779863751368781187",
"282512416182988950002451802337801355711",
"46391288965942908251228241860702065346",
"96508653390480798171832481510610209822",
"302351327614457373874089032429534260692",
"56203443124045086122315357483820886481",
"320661054403104471613110459040240755943",
"255353385734295211151447669732282896272"
]
},
"target": {
"file": "sound/usb/card.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2025-40085-0665cecd",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@28412b489b088fb88dff488305fd4e56bd47f6e4",
"digest": {
"threshold": 0.9,
"line_hashes": [
"146871032233152340113779863751368781187",
"282512416182988950002451802337801355711",
"46391288965942908251228241860702065346",
"96508653390480798171832481510610209822",
"302351327614457373874089032429534260692",
"56203443124045086122315357483820886481",
"320661054403104471613110459040240755943",
"255353385734295211151447669732282896272"
]
},
"target": {
"file": "sound/usb/card.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2025-40085-1c6e121e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@576312eb436326b44b7010f4d9ae2b698df075ea",
"digest": {
"function_hash": "194773878270060653378186052976798630485",
"length": 235.0
},
"target": {
"function": "try_to_register_card",
"file": "sound/usb/card.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2025-40085-1cd2e1e7",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8d19a7ab28c7b9c207db5c5282afa8cc8595bcdb",
"digest": {
"function_hash": "194773878270060653378186052976798630485",
"length": 235.0
},
"target": {
"function": "try_to_register_card",
"file": "sound/usb/card.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2025-40085-26b05abf",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8503ac1a62075a085402e42a386b5c627c821a51",
"digest": {
"threshold": 0.9,
"line_hashes": [
"146871032233152340113779863751368781187",
"282512416182988950002451802337801355711",
"46391288965942908251228241860702065346",
"96508653390480798171832481510610209822",
"302351327614457373874089032429534260692",
"56203443124045086122315357483820886481",
"320661054403104471613110459040240755943",
"255353385734295211151447669732282896272"
]
},
"target": {
"file": "sound/usb/card.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2025-40085-556050f8",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8503ac1a62075a085402e42a386b5c627c821a51",
"digest": {
"function_hash": "194773878270060653378186052976798630485",
"length": 235.0
},
"target": {
"function": "try_to_register_card",
"file": "sound/usb/card.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2025-40085-5c424ca3",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8d19a7ab28c7b9c207db5c5282afa8cc8595bcdb",
"digest": {
"threshold": 0.9,
"line_hashes": [
"146871032233152340113779863751368781187",
"282512416182988950002451802337801355711",
"46391288965942908251228241860702065346",
"96508653390480798171832481510610209822",
"302351327614457373874089032429534260692",
"56203443124045086122315357483820886481",
"320661054403104471613110459040240755943",
"255353385734295211151447669732282896272"
]
},
"target": {
"file": "sound/usb/card.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2025-40085-bc3a5f6e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@28412b489b088fb88dff488305fd4e56bd47f6e4",
"digest": {
"function_hash": "194773878270060653378186052976798630485",
"length": 235.0
},
"target": {
"function": "try_to_register_card",
"file": "sound/usb/card.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2025-40085-c27bc538",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@736159f7b296d7a95f7208eb4799639b1f8b16a0",
"digest": {
"function_hash": "194773878270060653378186052976798630485",
"length": 235.0
},
"target": {
"function": "try_to_register_card",
"file": "sound/usb/card.c"
},
"signature_type": "Function",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2025-40085-e3159f4a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@736159f7b296d7a95f7208eb4799639b1f8b16a0",
"digest": {
"threshold": 0.9,
"line_hashes": [
"146871032233152340113779863751368781187",
"282512416182988950002451802337801355711",
"46391288965942908251228241860702065346",
"96508653390480798171832481510610209822",
"302351327614457373874089032429534260692",
"56203443124045086122315357483820886481",
"320661054403104471613110459040240755943",
"255353385734295211151447669732282896272"
]
},
"target": {
"file": "sound/usb/card.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2025-40085-f3685895",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bba7208765d26e5e36b87f21dacc2780b064f41f",
"digest": {
"threshold": 0.9,
"line_hashes": [
"146871032233152340113779863751368781187",
"282512416182988950002451802337801355711",
"46391288965942908251228241860702065346",
"96508653390480798171832481510610209822",
"302351327614457373874089032429534260692",
"56203443124045086122315357483820886481",
"320661054403104471613110459040240755943",
"255353385734295211151447669732282896272"
]
},
"target": {
"file": "sound/usb/card.c"
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"id": "CVE-2025-40085-fac9d715",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bba7208765d26e5e36b87f21dacc2780b064f41f",
"digest": {
"function_hash": "194773878270060653378186052976798630485",
"length": 235.0
},
"target": {
"function": "try_to_register_card",
"file": "sound/usb/card.c"
},
"signature_type": "Function",
"signature_version": "v1"
}
]