CVE-2024-25741

5.5 mediumEPSS 0.3%

Medium (5.5) in linux linux kernel. EPSS 0.3% chance of exploitation in the next 30 days.

printer_write in drivers/usb/gadget/function/f_printer.c in the Linux kernel through 6.7.4 does not properly call usb_ep_queue, which might allow attackers to cause a denial of service or have unspecified other impact.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
CWE: CWE-703
Published: 2024-02-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

linux:linux_kernel

References

https://www.spinics.net/lists/linux-usb/msg252167.html
https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
https://www.spinics.net/lists/linux-usb/msg252167.html

Check your stack JSON