Riskcovery

CVE-2025-37934

ASoC: simple-card-utils: Fix pointer check in graph_util_parse_link_direction

State
Published
Severity
Not scored
Published
May 20, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: simple-card-utils: Fix pointer check in graph_util_parse_link_direction

Actually check if the passed pointers are valid, before writing to them. This also fixes a USBAN warning: UBSAN: invalid-load in ../sound/soc/fsl/imx-card.c:687:25 load of value 255 is not a valid value for type '_Bool'

This is because playback_only is uninitialized and is not written to, as the playback-only property is absent.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 844de7eebe97a1c277f8a408457712086c957195 to before b41a49d5435e0f76da320f231b7252800e8f736fAffected
  • 844de7eebe97a1c277f8a408457712086c957195 to before 9b5b3088c4d1752253491705919bd7d067964288Affected
  • 844de7eebe97a1c277f8a408457712086c957195 to before 3cc393d2232ec770b5f79bf0673d67702a3536c3Affected
LinuxLinux
  • 6.11Affected
  • before 6.11Not affected
  • 6.12.28 through 6.12.*Not affected
  • 6.14.6 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.