CVE-2025-38706: ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() snd_soc_remove_pcm_runtime() might be called with rtd == NULL which will leads to null pointer dereference. This was reproduced with topology loading and marking a link as ignore due to missing hardware component on the system. On module removal the soc_tplg_remove_link() would call snd_soc_remove_pcm_runtime() with rtd == NULL since the link was ignored, no runtime was created.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to < 8b465bedc2b417fd27c1d1ab7122882b4b60b1a0affected
50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to < 82ba7b8cf9f6e3bf392a9f08ba3d1c0b200ccb94affected
50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to < 7f8fc03712194fd4e2df28af7f7f7a38205934efaffected
50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to < 41f53afe53a57a7c50323f99424b598190acf192affected
50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to < 2fce20decc6a83f16dd73744150c4e7ea6c97c21affected
50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to < cecc65827ef3df9754e097582d89569139e6cd1eaffected
50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to < 7ce0a7255ce97ed7c54afae83fdbce712a1f0c9eaffected
50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to < 2d91cb261cac6d885954b8f5da28b5c176c18131affected

Linux Linux

Default version status: affected

5.6affected
0 to < 5.6unaffected
5.10.241 to ≤ 5.10.*unaffected
5.15.190 to ≤ 5.15.*unaffected
6.1.149 to ≤ 6.1.*unaffected
6.6.103 to ≤ 6.6.*unaffected
6.12.43 to ≤ 6.12.*unaffected
6.15.11 to ≤ 6.15.*unaffected
6.16.2 to ≤ 6.16.*unaffected
6.17 to ≤ *unaffected

CVE-2025-38706

ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()

Description

Affected products

Linux Linux

Linux Linux

References