You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
sddr55 driver
About this tag
The sddr55 driver is a Linux kernel usb-storage driver for a specific family of USB storage devices. A vulnerability, CVE-2025-40345, was discovered in this driver that could cause heap corruption when a malicious USB device reports out-of-range physical block addresses. The flaw was fixed upstream by rejecting such addresses and failing the transfer instead of accessing out-of-range memory. This tag covers discussions about the sddr55 driver, its security issues, and related fixes.
A newly published Linux kernel vulnerability, tracked as CVE-2025-40345, exposes a flaw in the usb-storage driver implementation for the sddr55 device family that can lead to heap corruption when a malicious or malformed USB storage device reports out‑of‑range physical block addresses (PBAs)...