CVE-2025-37793

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe() devm_kasprintf() returns NULL when memory allocation fails. Currently, avs_component_probe() does not check for this case, which results in a NULL pointer dereference.

Reserved 2025-04-16 | Published 2025-05-01 | Updated 2025-05-26 | Assigner Linux

Product status

Default status
unaffected

739c031110da9ba966b0189fa25a2a1c0d42263c before aaa93b8846101461de815759d39979661b82d5a5
affected

739c031110da9ba966b0189fa25a2a1c0d42263c before 23fde311ea1d0a6c36bf92ce48b90b77d0ece1a4
affected

739c031110da9ba966b0189fa25a2a1c0d42263c before c2825073271b6f15e669a424b363612082494863
affected

739c031110da9ba966b0189fa25a2a1c0d42263c before 95f723cf141b95e3b3a5b92cf2ea98a863fe7275
affected

Default status
affected

6.6
affected

Any version before 6.6
unaffected

6.6.88
unaffected

6.12.25
unaffected

6.14.4
unaffected

6.15
unaffected

References

git.kernel.org/...c/aaa93b8846101461de815759d39979661b82d5a5

git.kernel.org/...c/23fde311ea1d0a6c36bf92ce48b90b77d0ece1a4

git.kernel.org/...c/c2825073271b6f15e669a424b363612082494863

git.kernel.org/...c/95f723cf141b95e3b3a5b92cf2ea98a863fe7275

cve.org (CVE-2025-37793)

nvd.nist.gov (CVE-2025-37793)

Download JSON