CVE-2025-38474

A flaw was found in the Linux kernel's usb: net: sierra driver. The driver incorrectly handles USB device endpoints by failing to verify that a required interrupt input endpoint is present. A local attacker with low privileges could exploit this omission, potentially leading to a denial of service (DoS), information disclosure, or arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.