01 Record

CVE-2025-22022

usb: xhci: Apply the link chain quirk on NEC isoc endpoints

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

usb: xhci: Apply the link chain quirk on NEC isoc endpoints

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.20% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 9.8% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-30.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-04-16 10:23Z1 YR AGO

Last updated

2026-08-05 11:56Z2 MO AGO

Reserved

2024-12-29

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-787Out-of-bounds WriteBase

Data version

5.2

Document digest

19c648a913aa55531494ead307503aba536f2dc3ea03456a7f1d4708a13a1365

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux7e393a834b41001174a8fb3ae3bc23a749467760 to < abf2df229b6a9172cc1827749c1a446d28e00a2e, 7e393a834b41001174a8fb3ae3bc23a749467760 to < 8b586de6f03c850ff48d42e539b4708d1f3f8f1a, 7e393a834b41001174a8fb3ae3bc23a749467760 to < 1143f790a6316201dc8f067eba4c94ea97ecb6ca, 7e393a834b41001174a8fb3ae3bc23a749467760 to < dbf427663ce272070d3004b5fca63a4a537d781c, 7e393a834b41001174a8fb3ae3bc23a749467760 to < a4931d9fb99eb5462f3eaa231999d279c40afb21, 7e393a834b41001174a8fb3ae3bc23a749467760 to < 43a18225150ce874d23b37761c302a5dffee1595, 7e393a834b41001174a8fb3ae3bc23a749467760 to < 061a1683bae6ef56ab8fa392725ba7495515cd1d, 7e393a834b41001174a8fb3ae3bc23a749467760 to < bb0ba4cb1065e87f9cc75db1fa454e56d0894d01, 5c7a6982e976b381595c9d4ee8e8c94564a40aec, f12ea4a8ca7009fa2d54794c3fcb8e638453bcff, 3.0.9 to < 3.1, 3.1.1 to < 3.2, 3.2—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/abf2df229b6a9172cc1827749c1a446d28e00a2e
git.kernel.orghttps://git.kernel.org/stable/c/8b586de6f03c850ff48d42e539b4708d1f3f8f1a
git.kernel.orghttps://git.kernel.org/stable/c/1143f790a6316201dc8f067eba4c94ea97ecb6ca
git.kernel.orghttps://git.kernel.org/stable/c/dbf427663ce272070d3004b5fca63a4a537d781c
git.kernel.orghttps://git.kernel.org/stable/c/a4931d9fb99eb5462f3eaa231999d279c40afb21
git.kernel.orghttps://git.kernel.org/stable/c/43a18225150ce874d23b37761c302a5dffee1595
git.kernel.orghttps://git.kernel.org/stable/c/061a1683bae6ef56ab8fa392725ba7495515cd1d
git.kernel.orghttps://git.kernel.org/stable/c/bb0ba4cb1065e87f9cc75db1fa454e56d0894d01

07 Fixed in

Debian 12

linux
Fixed in 6.1.162-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.22-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.12.22-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.