Vigie VulnDBEuropean-hosted Vulnerability DB
EN
Menu

ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback (Linux Linux)

CVE-2025-40132
Non disponible

En bref

Source
NVD
EPSS
EPSS 0.21 % · centile 11 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
Linux
Statut NVD
Deferred

Rechercher sur…

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback In create_sdw_dailink() check that sof_end->codec_info->add_sidecar is not NULL before calling it. The original code assumed that if include_sidecar is true, the codec on that link has an add_sidecar callback. But there could be other codecs on the same link that do not have an add_sidecar callback.

Références

Références européennes

Avis du CERT-FR

Produits affectés

ProduitVersions
Linux · Linuxaffected da5244180281a18c4c7859674fec308514aaf629 < aea038062edfca9c6e5ddcecd4611d5a80113b4e ; affected da5244180281a18c4c7859674fec308514aaf629 < a5416c0fc9e77b69f853dfb1e78bc05a7c06a789 ; affected da5244180281a18c4c7859674fec308514aaf629 < 87cab86925b7fa4c1c977bc191ac549a3b23f0ea
Linux · Linuxaffected 6.10 ; unaffected 0 < 6.10 ; unaffected 6.12.53 ≤ 6.12.* ; unaffected 6.17.3 ≤ 6.17.* ; unaffected 6.18 ≤ *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD