https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T12:52:43.835918+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-38729 CVE-2025-38729 — ALSA: usb-audio: Validate UAC3 power domain descriptors, too 2026-09-30T12:52:43.838784+00:00

Affected: Linux, Siemens SIMATIC CN 4100

In the Linux kernel, the following vulnerability has been resolved:

ALSA: usb-audio: Validate UAC3 power domain descriptors, too

UAC3 power domain descriptors need to be verified with its variable bLength for avoiding the unexpected OOB accesses by malicious firmware, too.