CVE-2025-37810 usb: dwc3: gadget: check that event count does not exceed event buffer length

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Affect USB Device Drivers in 2024 and 2025 Two vulnerabilities have been reported affecting USB device drivers. CVE-2024-46674, published on September 13, 2024, addresses issues with the reference count of probed platform devices. CVE-2025-37810, published on May 8, 2025, ensures that the event count does not exceed the event buffer length in USB drivers. 3 sources 46