CVE-2025-40116
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup The kthread_run() function returns error pointers so the max3421_hcd->spi_thread pointer can be either error pointers or NULL. Check for both before dereferencing it.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedNov 12, 2025
First seenNov 12, 2025
How to fix
Update
- Linux Linux89838fe5c6c010ff8d3924f22afd9c18c5c95310, 3facf69a735e730ae36387f18780fe420708aa91, e0e0ce06f3571be9b26790e4df56ba37b1de8543, 3723c3dda1cc82c9bbca08fcbd46705a361bfd56, b0439e3762ac9ea580f714e1504a1827d1ad32f5, e68ea6de1d0551f90d7a2c75f82cb3ebe5e397dc, b682ce44bf20ada752a2f6ce70d5a575c56f6a35, 186e8f2bdba551f3ae23396caccd452d985c23e3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 05dfa5c9bc37933181b619e42ec0eeb41ef31362 ≤ v < 89838fe5c6c010ff8d3924f22afd9c18c5c95310, 05dfa5c9bc37933181b619e42ec0eeb41ef31362 ≤ v < 3facf69a735e730ae36387f18780fe420708aa91, 05dfa5c9bc37933181b619e42ec0eeb41ef31362 ≤ v < e0e0ce06f3571be9b26790e4df56ba37b1de8543, 05dfa5c9bc37933181b619e42ec0eeb41ef31362 ≤ v < 3723c3dda1cc82c9bbca08fcbd46705a361bfd56, 05dfa5c9bc37933181b619e42ec0eeb41ef31362 ≤ v < b0439e3762ac9ea580f714e1504a1827d1ad32f5, 05dfa5c9bc37933181b619e42ec0eeb41ef31362 ≤ v < e68ea6de1d0551f90d7a2c75f82cb3ebe5e397dc, 05dfa5c9bc37933181b619e42ec0eeb41ef31362 ≤ v < b682ce44bf20ada752a2f6ce70d5a575c56f6a35, 05dfa5c9bc37933181b619e42ec0eeb41ef31362 ≤ v < 186e8f2bdba551f3ae23396caccd452d985c23e3, 3.16 | 89838fe5c6c010ff8d3924f22afd9c18c5c95310, 3facf69a735e730ae36387f18780fe420708aa91, e0e0ce06f3571be9b26790e4df56ba37b1de8543, 3723c3dda1cc82c9bbca08fcbd46705a361bfd56, b0439e3762ac9ea580f714e1504a1827d1ad32f5, e68ea6de1d0551f90d7a2c75f82cb3ebe5e397dc, b682ce44bf20ada752a2f6ce70d5a575c56f6a35, 186e8f2bdba551f3ae23396caccd452d985c23e3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.