Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-38307

ASoC: Intel: avs: Verify content returned by parse_int_array()

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Verify content returned by parse_int_array() The first element of the returned array stores its length. If it is 0, any manipulation beyond the element at index 0 ends with null-ptr-deref.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 5a565ba23abe478f3d4c3b0c8798bcb5215b82f5 to < cc03c899e6d9812b25c3754c9a95c3830c4aec26affected
  • 5a565ba23abe478f3d4c3b0c8798bcb5215b82f5 to < 18ff538aac63de1866e5a49d57e22788b5c21d12affected
  • 5a565ba23abe478f3d4c3b0c8798bcb5215b82f5 to < 2916794ffbce604cc2cda105f6b8a4a7c748dd7faffected
  • 5a565ba23abe478f3d4c3b0c8798bcb5215b82f5 to < 93e246b6769bdacb09cfff4ea0f00fe5ab4f0d7aaffected

Linux Linux

Default version status: affected

  • 6.2affected
  • 0 to < 6.2unaffected
  • 6.6.94 to ≤ 6.6.*unaffected
  • 6.12.34 to ≤ 6.12.*unaffected
  • 6.15.3 to ≤ 6.15.*unaffected
  • 6.16 to ≤ *unaffected

References