CVE-2025-40094

usb: gadget: f_acm: Refactor bind path to use __free()

References

Notes

 carnil> Introduced in 1f1ba11b6494 ("usb gadget: issue notifications from ACM
 carnil> function"). Vulnerable versions: 2.6.27.

Bugs

Status

Branch Status
upstream released (6.18-rc1) [47b2116e54b4a854600341487e8b55249e926324]
6.18-upstream-stable N/A "Fixed before branching point"
6.17-upstream-stable released (6.17.5) [c4301e4dd6b32faccb744f1c2320e64235b68d3b]
6.12-upstream-stable released (6.12.55) [201a66d8e6630762e760e1d78f1d149da1691e7b]
6.6-upstream-stable released (6.6.114) [e348d18fb0124b662cfefb3001733b49da428215]
6.1-upstream-stable released (6.1.158) [2b1546f7c5fc6c44555a8e7a2b34229d1dcd2175]
5.10-upstream-stable needed
sid released (6.17.6-1)
6.12-trixie-security released (6.12.57-1)
6.1-bookworm-security released (6.1.158-1)
5.10-bullseye-security needed