CVE-2025-38706

ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()

State: Published
Severity: Not scored
Published: Sep 4, 2025
Updated: May 12, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()

snd_soc_remove_pcm_runtime() might be called with rtd == NULL which will leads to null pointer dereference. This was reproduced with topology loading and marking a link as ignore due to missing hardware component on the system. On module removal the soc_tplg_remove_link() would call snd_soc_remove_pcm_runtime() with rtd == NULL since the link was ignored, no runtime was created.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to before 8b465bedc2b417fd27c1d1ab7122882b4b60b1a0Affected 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to before 82ba7b8cf9f6e3bf392a9f08ba3d1c0b200ccb94Affected 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to before 7f8fc03712194fd4e2df28af7f7f7a38205934efAffected 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to before 41f53afe53a57a7c50323f99424b598190acf192Affected 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to before 2fce20decc6a83f16dd73744150c4e7ea6c97c21Affected 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to before cecc65827ef3df9754e097582d89569139e6cd1eAffected 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to before 7ce0a7255ce97ed7c54afae83fdbce712a1f0c9eAffected 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to before 2d91cb261cac6d885954b8f5da28b5c176c18131Affected
LinuxLinux	5.6Affected before 5.6Not affected 5.10.241 through 5.10.Not affected 5.15.190 through 5.15.Not affected 6.1.149 through 6.1.Not affected 6.6.103 through 6.6.Not affected 6.12.43 through 6.12.Not affected 6.15.11 through 6.15.Not affected 6.16.2 through 6.16.*Not affected 6.17 and laterNot affected

Product

Versions

LinuxLinux

50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to before 8b465bedc2b417fd27c1d1ab7122882b4b60b1a0Affected
50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to before 82ba7b8cf9f6e3bf392a9f08ba3d1c0b200ccb94Affected
50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to before 7f8fc03712194fd4e2df28af7f7f7a38205934efAffected
50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to before 41f53afe53a57a7c50323f99424b598190acf192Affected
50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to before 2fce20decc6a83f16dd73744150c4e7ea6c97c21Affected
50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to before cecc65827ef3df9754e097582d89569139e6cd1eAffected
50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to before 7ce0a7255ce97ed7c54afae83fdbce712a1f0c9eAffected
50cd9b5317d5593d0a33f4227f56ddcc1bf66604 to before 2d91cb261cac6d885954b8f5da28b5c176c18131Affected

LinuxLinux

5.6Affected
before 5.6Not affected
5.10.241 through 5.10.*Not affected
5.15.190 through 5.15.*Not affected
6.1.149 through 6.1.*Not affected
6.6.103 through 6.6.*Not affected
6.12.43 through 6.12.*Not affected
6.15.11 through 6.15.*Not affected
6.16.2 through 6.16.*Not affected
6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.