Riskcovery

CVE-2025-38307

ASoC: Intel: avs: Verify content returned by parse_int_array()

State
Published
Severity
Not scored
Published
Jul 10, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: Intel: avs: Verify content returned by parse_int_array()

The first element of the returned array stores its length. If it is 0, any manipulation beyond the element at index 0 ends with null-ptr-deref.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5a565ba23abe478f3d4c3b0c8798bcb5215b82f5 to before cc03c899e6d9812b25c3754c9a95c3830c4aec26Affected
  • 5a565ba23abe478f3d4c3b0c8798bcb5215b82f5 to before 18ff538aac63de1866e5a49d57e22788b5c21d12Affected
  • 5a565ba23abe478f3d4c3b0c8798bcb5215b82f5 to before 2916794ffbce604cc2cda105f6b8a4a7c748dd7fAffected
  • 5a565ba23abe478f3d4c3b0c8798bcb5215b82f5 to before 93e246b6769bdacb09cfff4ea0f00fe5ab4f0d7aAffected
LinuxLinux
  • 6.2Affected
  • before 6.2Not affected
  • 6.6.94 through 6.6.*Not affected
  • 6.12.34 through 6.12.*Not affected
  • 6.15.3 through 6.15.*Not affected
  • 6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.