Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2025-21847

ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() The nullity of sps->cstream should be checked similarly as it is done in sof_set_stream_data_offset() function. Assuming that it is not NULL if sps->stream is NULL is incorrect and can lead to NULL pointer dereference.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e46f81541b1bf5db45a8c7a9cbc35ffc696877dc to < dfe25c554daa12ee26eb3540bbded57733ed5d9caffected
  • 090349a9feba3ceee3997d31d68ffe54e5b57acb to < 2b3878baf90918a361a3dfd3513025100b1b40b6affected
  • 090349a9feba3ceee3997d31d68ffe54e5b57acb to < 62ab1ae5511c59b5f0bf550136ff321331adca9faffected
  • 090349a9feba3ceee3997d31d68ffe54e5b57acb to < 6c18f5eb2043ebf4674c08a9690218dc818a11abaffected
  • 090349a9feba3ceee3997d31d68ffe54e5b57acb to < d8d99c3b5c485f339864aeaa29f76269cc0ea975affected

Linux Linux

Default version status: affected

  • 6.3affected
  • 0 to < 6.3unaffected
  • 6.6.80 to ≤ 6.6.*unaffected
  • 6.12.17 to ≤ 6.12.*unaffected
  • 6.13.5 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References