Home

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback In create_sdw_dailink() check that sof_end->codec_info->add_sidecar is not NULL before calling it. The original code assumed that if include_sidecar is true, the codec on that link has an add_sidecar callback. But there could be other codecs on the same link that do not have an add_sidecar callback.

PUBLISHED Reserved 2025-04-16 | Published 2025-11-12 | Updated 2025-11-12 | Assigner Linux

Product status

Default status
unaffected

da5244180281a18c4c7859674fec308514aaf629 (git) before aea038062edfca9c6e5ddcecd4611d5a80113b4e
affected

da5244180281a18c4c7859674fec308514aaf629 (git) before a5416c0fc9e77b69f853dfb1e78bc05a7c06a789
affected

da5244180281a18c4c7859674fec308514aaf629 (git) before 87cab86925b7fa4c1c977bc191ac549a3b23f0ea
affected

Default status
affected

6.10
affected

Any version before 6.10
unaffected

6.12.53 (semver)
unaffected

6.17.3 (semver)
unaffected

6.18-rc1 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/aea038062edfca9c6e5ddcecd4611d5a80113b4e

git.kernel.org/...c/a5416c0fc9e77b69f853dfb1e78bc05a7c06a789

git.kernel.org/...c/87cab86925b7fa4c1c977bc191ac549a3b23f0ea

cve.org (CVE-2025-40132)

nvd.nist.gov (CVE-2025-40132)

Download JSON