CVE-2025-37934

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Fix pointer check in graph_util_parse_link_direction Actually check if the passed pointers are valid, before writing to them. This also fixes a USBAN warning: UBSAN: invalid-load in ../sound/soc/fsl/imx-card.c:687:25 load of value 255 is not a valid value for type '_Bool' This is because playback_only is uninitialized and is not written to, as the playback-only property is absent.

Reserved 2025-04-16 | Published 2025-05-20 | Updated 2025-05-26 | Assigner Linux

Product status

Default status
unaffected

844de7eebe97a1c277f8a408457712086c957195 before b41a49d5435e0f76da320f231b7252800e8f736f
affected

844de7eebe97a1c277f8a408457712086c957195 before 9b5b3088c4d1752253491705919bd7d067964288
affected

844de7eebe97a1c277f8a408457712086c957195 before 3cc393d2232ec770b5f79bf0673d67702a3536c3
affected

Default status
affected

6.11
affected

Any version before 6.11
unaffected

6.12.28
unaffected

6.14.6
unaffected

6.15
unaffected

References

git.kernel.org/...c/b41a49d5435e0f76da320f231b7252800e8f736f

git.kernel.org/...c/9b5b3088c4d1752253491705919bd7d067964288

git.kernel.org/...c/3cc393d2232ec770b5f79bf0673d67702a3536c3

cve.org (CVE-2025-37934)

nvd.nist.gov (CVE-2025-37934)

Download JSON