Riskcovery

CVE-2025-39696

ALSA: hda: tas2781: Fix wrong reference of tasdevice_priv

State
Published
Severity
7.8 High
Published
Sep 5, 2025
Updated
Aug 5, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: hda: tas2781: Fix wrong reference of tasdevice_priv

During the conversion to unify the calibration data management, the reference to tasdevice_priv was wrongly set to h->hda_priv instead of h->priv. This resulted in memory corruption and crashes eventually. Unfortunately it's a void pointer, hence the compiler couldn't know that it's wrong.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4fe238513407d83f38bf5782e8bcdd7b8baeb85d to before 2812815aa79637d39d4398ecd7e58f65d1c79231Affected
  • 4fe238513407d83f38bf5782e8bcdd7b8baeb85d to before 3f4422e7c9436abf81a00270be7e4d6d3760ec0eAffected
LinuxLinux
  • 6.16Affected
  • before 6.16Not affected
  • 6.16.4 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.