Riskcovery

CVE-2025-37793

ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe()

State
Published
Severity
Not scored
Published
May 1, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe()

devm_kasprintf() returns NULL when memory allocation fails. Currently, avs_component_probe() does not check for this case, which results in a NULL pointer dereference.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 739c031110da9ba966b0189fa25a2a1c0d42263c to before aaa93b8846101461de815759d39979661b82d5a5Affected
  • 739c031110da9ba966b0189fa25a2a1c0d42263c to before 23fde311ea1d0a6c36bf92ce48b90b77d0ece1a4Affected
  • 739c031110da9ba966b0189fa25a2a1c0d42263c to before c2825073271b6f15e669a424b363612082494863Affected
  • 739c031110da9ba966b0189fa25a2a1c0d42263c to before 95f723cf141b95e3b3a5b92cf2ea98a863fe7275Affected
LinuxLinux
  • 6.6Affected
  • before 6.6Not affected
  • 6.6.88 through 6.6.*Not affected
  • 6.12.25 through 6.12.*Not affected
  • 6.14.4 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.