CVE-2025-40016
Description
A vulnerability exists in the Linux kernel’s UVC (USB Video Class) video driver (uvcvideo) related to how media entity identifiers are processed. According to the UVC 1.1+ specification, each unit and terminal must have a non-zero, unique ID. In certain cases, when an entity is assigned an ID of 0 or a duplicate ID, the driver did not correctly mark it as invalid, potentially leading to incorrect entity lookups and a malformed internal representation of the media device topology.
Mitigation
To mitigate this issue, prevent the `uvcvideo` kernel module from loading if USB video devices are not required. Create `/etc/modprobe.d/blacklist-uvcvideo.conf` with `blacklist uvcvideo`. Regenerate the initramfs using `dracut -f -v` and reboot the system. This action may impact functionality dependent on USB video devices.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 4.7 | N/A | N/A |
| Attack Vector | Local | N/A | N/A |
| Attack Complexity | High | N/A | N/A |
| Privileges Required | Low | N/A | N/A |
| User Interaction | None | N/A | N/A |
| Scope | Unchanged | N/A | N/A |
| Confidentiality | None | N/A | N/A |
| Integrity Impact | None | N/A | N/A |
| Availability Impact | High | N/A | N/A |
Vector
Red Hat: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Understanding the Weakness (CWE)
Access Control
Technical Impact: Bypass Protection Mechanism
If unique identifiers are assumed when protecting sensitive resources, then duplicate identifiers might allow attackers to bypass the protection.
Other
Technical Impact: Quality Degradation
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
