cve 2025 40275

The Linux kernel has closed a small but important robustness hole in the ALSA usb‑audio stack: CVE‑2025‑40275 is a NULL‑pointer dereference in snd_usb_mixer_controls_badd that can be triggered by a crafted USB audio descriptor, and the upstream fix adds a simple NULL check to prevent an oops...