01 Record

CVE-2025-38153

net: usb: aqc111: fix error handling of usbnet read calls

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

net: usb: aqc111: fix error handling of usbnet read calls

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.17% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 7.0% of scored records. A rank, not a probability.
NVD base score: 7.1 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-07-03 08:35Z1 YR AGO

Last updated

2026-05-11 21:22Z3 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-125Out-of-bounds ReadBase

Data version

5.2

Document digest

34988bb4eb455d828c30761b364ccde74c166d2b75d610cceb73055f942426ce

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxdf2d59a2ab6c9ceac2c4104272fce03493b8f62f to < 8c97655275482ef5384ce0501640630a0fc0f6f4, df2d59a2ab6c9ceac2c4104272fce03493b8f62f to < 11273279012c922f37cfb4dd95d142803fc07b98, df2d59a2ab6c9ceac2c4104272fce03493b8f62f to < f398d2dfe450ce2c031d10b585448862d74a0501, df2d59a2ab6c9ceac2c4104272fce03493b8f62f to < acb47a40b5e38be03ef659b7bacdddc592ed73b7, df2d59a2ab6c9ceac2c4104272fce03493b8f62f to < 60790d287c1a1ced3554d4a87c2f27bf299a932a, df2d59a2ab6c9ceac2c4104272fce03493b8f62f to < 30a9e834c74e260533b8d0885e3c89f6f32f7993, df2d59a2ab6c9ceac2c4104272fce03493b8f62f to < 7c01863b1c47f040d9674171e77789a423b9b128, df2d59a2ab6c9ceac2c4104272fce03493b8f62f to < 405b0d610745fb5e84fc2961d9b960abb9f3d107, 5.0—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/8c97655275482ef5384ce0501640630a0fc0f6f4
git.kernel.orghttps://git.kernel.org/stable/c/11273279012c922f37cfb4dd95d142803fc07b98
git.kernel.orghttps://git.kernel.org/stable/c/f398d2dfe450ce2c031d10b585448862d74a0501
git.kernel.orghttps://git.kernel.org/stable/c/acb47a40b5e38be03ef659b7bacdddc592ed73b7
git.kernel.orghttps://git.kernel.org/stable/c/60790d287c1a1ced3554d4a87c2f27bf299a932a
git.kernel.orghttps://git.kernel.org/stable/c/30a9e834c74e260533b8d0885e3c89f6f32f7993
git.kernel.orghttps://git.kernel.org/stable/c/7c01863b1c47f040d9674171e77789a423b9b128
git.kernel.orghttps://git.kernel.org/stable/c/405b0d610745fb5e84fc2961d9b960abb9f3d107
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html

01 Record index

CVE-2025-38153

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-38153

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References