In the Linux kernel, the following vulnerability has been resolved:

usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup

The kthread_run() function returns error pointers so the
max3421_hcd->spi_thread pointer can be either error pointers or NULL.
Check for both before dereferencing it.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00053.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
05dfa5c9bc37933181b619e42ec0eeb41ef31362 affected < 89838fe5c6c010ff8d3924f22afd9c18c5c95310
05dfa5c9bc37933181b619e42ec0eeb41ef31362 affected < 3facf69a735e730ae36387f18780fe420708aa91
05dfa5c9bc37933181b619e42ec0eeb41ef31362 affected < e0e0ce06f3571be9b26790e4df56ba37b1de8543
05dfa5c9bc37933181b619e42ec0eeb41ef31362 affected < 3723c3dda1cc82c9bbca08fcbd46705a361bfd56
05dfa5c9bc37933181b619e42ec0eeb41ef31362 affected < b0439e3762ac9ea580f714e1504a1827d1ad32f5
05dfa5c9bc37933181b619e42ec0eeb41ef31362 affected < e68ea6de1d0551f90d7a2c75f82cb3ebe5e397dc
05dfa5c9bc37933181b619e42ec0eeb41ef31362 affected < b682ce44bf20ada752a2f6ce70d5a575c56f6a35
05dfa5c9bc37933181b619e42ec0eeb41ef31362 affected < 186e8f2bdba551f3ae23396caccd452d985c23e3
Linux Linux affected
Version Status Constraints
3.16 affected —
0 unaffected < 3.16
5.4.301 unaffected ≤ 5.4.*
5.10.246 unaffected ≤ 5.10.*
5.15.195 unaffected ≤ 5.15.*
6.1.156 unaffected ≤ 6.1.*
6.6.112 unaffected ≤ 6.6.*
6.12.53 unaffected ≤ 6.12.*
6.17.3 unaffected ≤ 6.17.*
6.18 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories
Source ID Title
Debian DLA Debian DLA DLA-4379-1 linux-6.1 security update
Debian DLA Debian DLA DLA-4404-1 linux security update
Ubuntu USN Ubuntu USN USN-8029-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8030-1 Linux kernel (GCP) vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-3 Linux kernel (FIPS) vulnerabilities
Ubuntu USN Ubuntu USN USN-8034-1 Linux kernel (NVIDIA Tegra) vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-4 Linux kernel (AWS) vulnerabilities
Ubuntu USN Ubuntu USN USN-8029-2 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-5 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8034-2 Linux kernel (NVIDIA Tegra IGX) vulnerabilities
Ubuntu USN Ubuntu USN USN-8048-1 Linux kernel (OEM) vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-6 Linux kernel (NVIDIA) vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-7 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8033-8 Linux kernel (Intel IoTG) vulnerabilities
Ubuntu USN Ubuntu USN USN-8029-3 Linux kernel (Azure) vulnerabilities
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/186e8f2bdba551f3ae23396caccd452d985c23e3 cve-icon cve-icon
https://git.kernel.org/stable/c/3723c3dda1cc82c9bbca08fcbd46705a361bfd56 cve-icon cve-icon
https://git.kernel.org/stable/c/3facf69a735e730ae36387f18780fe420708aa91 cve-icon cve-icon
https://git.kernel.org/stable/c/89838fe5c6c010ff8d3924f22afd9c18c5c95310 cve-icon cve-icon
https://git.kernel.org/stable/c/b0439e3762ac9ea580f714e1504a1827d1ad32f5 cve-icon cve-icon
https://git.kernel.org/stable/c/b682ce44bf20ada752a2f6ce70d5a575c56f6a35 cve-icon cve-icon
https://git.kernel.org/stable/c/e0e0ce06f3571be9b26790e4df56ba37b1de8543 cve-icon cve-icon
https://git.kernel.org/stable/c/e68ea6de1d0551f90d7a2c75f82cb3ebe5e397dc cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025111251-CVE-2025-40116-3942@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-40116 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-40116 cve-icon
History

Mon, 01 Dec 2025 06:30:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Fri, 14 Nov 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Wed, 12 Nov 2025 23:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Wed, 12 Nov 2025 10:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup The kthread_run() function returns error pointers so the max3421_hcd->spi_thread pointer can be either error pointers or NULL. Check for both before dereferencing it.
Title usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-12-01T06:18:19.659Z

Reserved: 2025-04-16T07:20:57.168Z

Link: CVE-2025-40116

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-11-12T11:15:40.877

Modified: 2025-11-12T16:19:12.850

Link: CVE-2025-40116

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-11-12T00:00:00Z

Links: CVE-2025-40116 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-11-12T22:12:54Z

Weaknesses

No weakness.