Home

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: amd/sdw_utils: avoid NULL deref when devm_kasprintf() fails devm_kasprintf() may return NULL on memory allocation failure, but the debug message prints cpus->dai_name before checking it. Move the dev_dbg() call after the NULL check to prevent potential NULL pointer dereference.

PUBLISHED Reserved 2025-04-16 | Published 2025-11-12 | Updated 2025-12-01 | Assigner Linux

Product status

Default status
unaffected

cb8ea62e6402067ba092d4c1d66a9440513a572b (git) before 095d692e5997ece300c89f10d903d5230090e6a0
affected

cb8ea62e6402067ba092d4c1d66a9440513a572b (git) before a1cccbd19676fc36854535a7118ba2c27d0b84b3
affected

cb8ea62e6402067ba092d4c1d66a9440513a572b (git) before 5726b68473f7153a7f6294185e5998b7e2a230a2
affected

Default status
affected

6.12
affected

Any version before 6.12
unaffected

6.12.55 (semver)
unaffected

6.17.5 (semver)
unaffected

6.18 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/095d692e5997ece300c89f10d903d5230090e6a0

git.kernel.org/...c/a1cccbd19676fc36854535a7118ba2c27d0b84b3

git.kernel.org/...c/5726b68473f7153a7f6294185e5998b7e2a230a2

cve.org (CVE-2025-40162)

nvd.nist.gov (CVE-2025-40162)

Download JSON