Home

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix missing pointer check in hda_component_manager_init function The __component_match_add function may assign the 'matchptr' pointer the value ERR_PTR(-ENOMEM), which will subsequently be dereferenced. The call stack leading to the error looks like this: hda_component_manager_init |-> component_match_add |-> component_match_add_release |-> __component_match_add ( ... ,**matchptr, ... ) |-> *matchptr = ERR_PTR(-ENOMEM); // assign |-> component_master_add_with_match( ... match) |-> component_match_realloc(match, match->num); // dereference Add IS_ERR() check to prevent the crash. Found by Linux Verification Center (linuxtesting.org) with SVACE.

PUBLISHED Reserved 2025-04-16 | Published 2025-10-30 | Updated 2025-12-01 | Assigner Linux

Product status

Default status
unaffected

ae7abe36e352eddf8e30d3b1ea3fb402514ba13b (git) before 218a8504e62fc2c8a1fd12523346b7a2b9bd2474
affected

ae7abe36e352eddf8e30d3b1ea3fb402514ba13b (git) before 47d1b9ca923b55c3f407788f1f15b04957e0e027
affected

ae7abe36e352eddf8e30d3b1ea3fb402514ba13b (git) before 1cf11d80db5df805b538c942269e05a65bcaf5bc
affected

Default status
affected

5.17
affected

Any version before 5.17
unaffected

6.12.59 (semver)
unaffected

6.17.5 (semver)
unaffected

6.18 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/218a8504e62fc2c8a1fd12523346b7a2b9bd2474

git.kernel.org/...c/47d1b9ca923b55c3f407788f1f15b04957e0e027

git.kernel.org/...c/1cf11d80db5df805b538c942269e05a65bcaf5bc

cve.org (CVE-2025-40097)

nvd.nist.gov (CVE-2025-40097)

Download JSON

Data based on CVE®. Copyright © 1999-2025, The MITRE Corporation. All rights reserved.