CVE-2025-40345usb: storage: sddr55: Reject out-of-bound new_pba
- —Not scoredno CVSS score yet
- 0.21%Exploitation in 30 daysEPSS · top 89% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: usb: storage: sddr55: Reject out-of-bound new_pba Discovered by Atuin - Automated Vulnerability Discovery Engine. new_pba comes from the status packet returned after each write. A bogus device could report values beyond the block count derived from info->capacity, letting the driver walk off the end of pba_to_lba[] and corrupt heap memory. Reject PBAs that exceed the computed block count and fail the transfer so we avoid touching out-of-range mapping entries.
Timeline
ID reserved
By Linux
- 8 months later
· 8 months later
Published
- 6 months later
· 6 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Deferred.
- EPSS (exploitation in 30 days)
- 0.21% · top 89% of all CVEs (15 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – < d00a6c04a502cd52425dbf35588732c652b16490
- affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – < 26e9b5da3231da7dc357b363883b5b7b51a64092
- affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – < aa64e0e17e3a5991a25e6a46007770c629039869
- affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – < 04a8a6393f3f2f471e05eacca33282dd30b01432
- affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – < a20f1dd19d21dcb70140ea5a71b1f8cbe0c7e68f
- affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – < 5ebe8d479aaf4f41ac35e6955332304193c646f6
- affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – < b59d4fda7e7d0aff1043a7f742487cb829f5aac1
- affected 2.6.12
- unaffected < 2.6.12
- unaffected 5.10.247 – ≤ 5.10.*
- unaffected 5.15.197 – ≤ 5.15.*
- unaffected 6.1.159 – ≤ 6.1.*
- unaffected 6.6.119 – ≤ 6.6.*
- unaffected 6.12.61 – ≤ 6.12.*
- unaffected 6.17.11 – ≤ 6.17.*
- unaffected 6.18 – ≤ *
References
References8
- https://git.kernel.org/stable/c/d00a6c04a502cd52425dbf35588732c652b16490 (opens in a new tab)
- https://git.kernel.org/stable/c/26e9b5da3231da7dc357b363883b5b7b51a64092 (opens in a new tab)
- https://git.kernel.org/stable/c/aa64e0e17e3a5991a25e6a46007770c629039869 (opens in a new tab)
- https://git.kernel.org/stable/c/04a8a6393f3f2f471e05eacca33282dd30b01432 (opens in a new tab)
- https://git.kernel.org/stable/c/a20f1dd19d21dcb70140ea5a71b1f8cbe0c7e68f (opens in a new tab)
- https://git.kernel.org/stable/c/5ebe8d479aaf4f41ac35e6955332304193c646f6 (opens in a new tab)
- https://git.kernel.org/stable/c/b59d4fda7e7d0aff1043a7f742487cb829f5aac1 (opens in a new tab)
- https://cert-portal.siemens.com/productcert/html/ssa-253495.html (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2025-203107 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2025-40345)Record last updated .