Riskcovery

CVE-2025-37941

ASoC: codecs: wcd937x: fix a potential memory leak in wcd937x_soc_codec_probe()

State
Published
Severity
Not scored
Published
May 20, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: codecs: wcd937x: fix a potential memory leak in wcd937x_soc_codec_probe()

When snd_soc_dapm_new_controls() or snd_soc_dapm_add_routes() fails, wcd937x_soc_codec_probe() returns without releasing 'wcd937x->clsh_info', which is allocated by wcd_clsh_ctrl_alloc. Add wcd_clsh_ctrl_free() to prevent potential memory leak.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 313e978df7fc38b9e949ac5933d0d9d56d5e8a9c to before acadb2e2b3c5b9977a843a3a94fece9bdcf6aea1Affected
  • 313e978df7fc38b9e949ac5933d0d9d56d5e8a9c to before b573e04116fd33b9143fa276bbab2f0afad0a1aeAffected
  • 313e978df7fc38b9e949ac5933d0d9d56d5e8a9c to before aafb5325aca3e806b3ea3707402189263473d257Affected
  • 313e978df7fc38b9e949ac5933d0d9d56d5e8a9c to before 3e330acf4efd63876d673c046cd073a1d4ed57a8Affected
LinuxLinux
  • 6.11Affected
  • before 6.11Not affected
  • 6.12.24 through 6.12.*Not affected
  • 6.13.12 through 6.13.*Not affected
  • 6.14.3 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.