CVE-2025-40095
Published Oct 30, 2025
Modified Apr 15, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_rndis: Refactor bind path to use __free() After an bind/unbind cycle, the rndis->notify_req is left stale. If a subsequent bind fails, the unified error label attempts to free this stale request, leading to a NULL pointer dereference when accessing ep->ops->free_request. Refactor the error handling in the bind path to use the __free() automatic cleanup mechanism.
Is your site exposed to CVE-2025-40095?
Run a free security scan — no signup, results in seconds.
References
Other References
https://git.kernel.org/stable/c/08228941436047bdcd35a612c1aec0912a29d8cd
https://git.kernel.org/stable/c/380353c3a92be7d928e6f973bd065c5b79755ac3
https://git.kernel.org/stable/c/5f65c8ad8c7292ed7e3716343fcd590a51818cc3
https://git.kernel.org/stable/c/a8366263b7e5b663d7fb489d3a9ba1e2600049a6
https://git.kernel.org/stable/c/ef81226bb1f8b6e761cd0b53d2696e9c1bc955d1
Frequently Asked Questions
What is CVE-2025-40095? +
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: f_rndis: Refactor bind path to use __free()
After an bind/unbind cycle, the rndis->notify_req is left stale. If a
subsequent bind fails, the unified error label attempts to free this
stale request, leading to a NULL pointer dereference when accessing
ep->ops->free_request.
Refactor the error handling in the bind path to use the __free()
automatic cleanup mechanism.
How do I check if I'm vulnerable to CVE-2025-40095? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.