Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-37934

ASoC: simple-card-utils: Fix pointer check in graph_util_parse_link_direction

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Fix pointer check in graph_util_parse_link_direction Actually check if the passed pointers are valid, before writing to them. This also fixes a USBAN warning: UBSAN: invalid-load in ../sound/soc/fsl/imx-card.c:687:25 load of value 255 is not a valid value for type '_Bool' This is because playback_only is uninitialized and is not written to, as the playback-only property is absent.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 844de7eebe97a1c277f8a408457712086c957195 to < b41a49d5435e0f76da320f231b7252800e8f736faffected
  • 844de7eebe97a1c277f8a408457712086c957195 to < 9b5b3088c4d1752253491705919bd7d067964288affected
  • 844de7eebe97a1c277f8a408457712086c957195 to < 3cc393d2232ec770b5f79bf0673d67702a3536c3affected

Linux Linux

Default version status: affected

  • 6.11affected
  • 0 to < 6.11unaffected
  • 6.12.28 to ≤ 6.12.*unaffected
  • 6.14.6 to ≤ 6.14.*unaffected
  • 6.15 to ≤ *unaffected

References