Search: CVE-2025-40269

A vulnerability in the Linux kernel's ALSA usb-audio driver could cause a buffer overflow due to improper validation of PCM transfer packet sizes. The driver calculates packet sizes based on rate and packets per second, which may exceed the USB descriptor's maximum packet size, leading to overflow. A patch has been introduced to add a sanity check that returns an error if the packet size exceeds the allowed maximum, preventing the overflow.