Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-40338

ASoC: Intel: avs: Do not share the name pointer between components

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Do not share the name pointer between components By sharing 'name' directly, tearing down components may lead to use-after-free errors. Duplicate the name to avoid that. At the same time, update the order of operations - since commit cee28113db17 ("ASoC: dmaengine_pcm: Allow passing component name via config") the framework does not override component->name if set before invoking the initializer.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f1b3b320bd6519b16e3480f74f2926d106e3bcba to < 0a187ea7a5b4e78b9be1f9c1507cff04f3ae4ab1affected
  • f1b3b320bd6519b16e3480f74f2926d106e3bcba to < a80a82f567f7c6276d96409377d4691ea30d18a2affected
  • f1b3b320bd6519b16e3480f74f2926d106e3bcba to < 128bf29c992988f8b4f3829227339908fde5ec86affected
  • f1b3b320bd6519b16e3480f74f2926d106e3bcba to < 4dee5c1cc439b0d5ef87f741518268ad6a95b23daffected

Linux Linux

Default version status: affected

  • 5.19affected
  • 0 to < 5.19unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.114 to ≤ 6.12.*unaffected
  • 6.17.8 to ≤ 6.17.*unaffected
  • 6.18 to ≤ *unaffected

References