CVE-2025-38153— Linux kernel 安全漏洞
一分钟漏洞结论
影响对象
Linux Linux
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未正确验证USB读取结果，可能导致未初始化内存访问。
可能的 ATT&CK 技术 1 AI
T1055 · Process Injection影响版本矩阵 18
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Linux | Linux | df2d59a2ab6c9ceac2c4104272fce03493b8f62f< 8c97655275482ef5384ce0501640630a0fc0f6f4 |
affected |
df2d59a2ab6c9ceac2c4104272fce03493b8f62f< 11273279012c922f37cfb4dd95d142803fc07b98 |
affected | ||
df2d59a2ab6c9ceac2c4104272fce03493b8f62f< f398d2dfe450ce2c031d10b585448862d74a0501 |
affected | ||
df2d59a2ab6c9ceac2c4104272fce03493b8f62f< acb47a40b5e38be03ef659b7bacdddc592ed73b7 |
affected | ||
df2d59a2ab6c9ceac2c4104272fce03493b8f62f< 60790d287c1a1ced3554d4a87c2f27bf299a932a |
affected | ||
df2d59a2ab6c9ceac2c4104272fce03493b8f62f< 30a9e834c74e260533b8d0885e3c89f6f32f7993 |
affected | ||
df2d59a2ab6c9ceac2c4104272fce03493b8f62f< 7c01863b1c47f040d9674171e77789a423b9b128 |
affected | ||
df2d59a2ab6c9ceac2c4104272fce03493b8f62f< 405b0d610745fb5e84fc2961d9b960abb9f3d107 |
affected | ||
| … +10 条更多 | |||
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2025-38153 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
net: usb: aqc111: fix error handling of usbnet read calls
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
net: usb: aqc111: fix error handling of usbnet read calls
Syzkaller, courtesy of syzbot, identified an error (see report [1]) in
aqc111 driver, caused by incomplete sanitation of usb read calls'
results. This problem is quite similar to the one fixed in commit
920a9fa27e78 ("net: asix: add proper error handling of usb read errors").
For instance, usbnet_read_cmd() may read fewer than 'size' bytes,
even if the caller expected the full amount, and aqc111_read_cmd()
will not check its result properly. As [1] shows, this may lead
to MAC address in aqc111_bind() being only partly initialized,
triggering KMSAN warnings.
Fix the issue by verifying that the number of bytes read is
as expected and not less.
[1] Partial syzbot report:
BUG: KMSAN: uninit-value in is_valid_ether_addr include/linux/etherdevice.h:208 [inline]
BUG: KMSAN: uninit-value in usbnet_probe+0x2e57/0x4390 drivers/net/usb/usbnet.c:1830
is_valid_ether_addr include/linux/etherdevice.h:208 [inline]
usbnet_probe+0x2e57/0x4390 drivers/net/usb/usbnet.c:1830
usb_probe_interface+0xd01/0x1310 drivers/usb/core/driver.c:396
call_driver_probe drivers/base/dd.c:-1 [inline]
really_probe+0x4d1/0xd90 drivers/base/dd.c:658
__driver_probe_device+0x268/0x380 drivers/base/dd.c:800
...
Uninit was stored to memory at:
dev_addr_mod+0xb0/0x550 net/core/dev_addr_lists.c:582
__dev_addr_set include/linux/netdevice.h:4874 [inline]
eth_hw_addr_set include/linux/etherdevice.h:325 [inline]
aqc111_bind+0x35f/0x1150 drivers/net/usb/aqc111.c:717
usbnet_probe+0xbe6/0x4390 drivers/net/usb/usbnet.c:1772
usb_probe_interface+0xd01/0x1310 drivers/usb/core/driver.c:396
...
Uninit was stored to memory at:
ether_addr_copy include/linux/etherdevice.h:305 [inline]
aqc111_read_perm_mac drivers/net/usb/aqc111.c:663 [inline]
aqc111_bind+0x794/0x1150 drivers/net/usb/aqc111.c:713
usbnet_probe+0xbe6/0x4390 drivers/net/usb/usbnet.c:1772
usb_probe_interface+0xd01/0x1310 drivers/usb/core/driver.c:396
call_driver_probe drivers/base/dd.c:-1 [inline]
...
Local variable buf.i created at:
aqc111_read_perm_mac drivers/net/usb/aqc111.c:656 [inline]
aqc111_bind+0x221/0x1150 drivers/net/usb/aqc111.c:713
usbnet_probe+0xbe6/0x4390 drivers/net/usb/usbnet.c:1772
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未正确验证USB读取结果，可能导致未初始化内存访问。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
二、漏洞 CVE-2025-38153 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2025-38153 的情报信息
请登录查看更多情报信息。
同批安全公告 · Linux · 2025-07-03 · 共 78 条
| CVE-2025-38139 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2025-38123 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2025-38146 | 9.4 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2025-38120 | 9.4 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2025-38111 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38116 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38108 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38102 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38101 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38098 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38097 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38095 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38106 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38115 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38117 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38118 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38127 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38129 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38133 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2025-38141 | 7.8 HIGH | Linux kernel 安全漏洞 |
显示前 20 条，共 78 条。 查看全部 → →
IV. Related Vulnerabilities
V. Comments for CVE-2025-38153
暂无评论