CVE-2025-39930

ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai()

State: Published
Severity: 8.4 High
Published: Apr 18, 2025
Updated: Aug 5, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai()

commit 419d1918105e ("ASoC: simple-card-utils: use __free(device_node) for device node") uses __free(device_node) for dlc->of_node, but we need to keep it while driver is in use.

Don't use __free(device_node) in graph_util_parse_dai().

Scores

CVSS	Score	Vector	Source
3.1	8.4 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e03f8d14191142849abad62307d4128afd304521 to before 146e25625378f7d4463acbd1ffbd975f3332a806Affected 142a386a805809e21361976d566392bcd07870b8 to before 16a49e3fda339aa552cde7f2cdbb25b91426cb8aAffected 419d1918105e5d9926ab02f1f834bb416dc76f65 to before 232a32e8a7e9be8a2ee238df9b5304eed2f4e195Affected 419d1918105e5d9926ab02f1f834bb416dc76f65 to before de74ec718e0788e1998eb7289ad07970e27cae27Affected 6.6.130 to before 6.6.135Affected 6.12.78 to before 6.12.82Affected
LinuxLinux	6.14Affected before 6.14Not affected 6.6.135 through 6.6.Not affected 6.12.82 through 6.12.Not affected 6.14.2 through 6.14.*Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

e03f8d14191142849abad62307d4128afd304521 to before 146e25625378f7d4463acbd1ffbd975f3332a806Affected
142a386a805809e21361976d566392bcd07870b8 to before 16a49e3fda339aa552cde7f2cdbb25b91426cb8aAffected
419d1918105e5d9926ab02f1f834bb416dc76f65 to before 232a32e8a7e9be8a2ee238df9b5304eed2f4e195Affected
419d1918105e5d9926ab02f1f834bb416dc76f65 to before de74ec718e0788e1998eb7289ad07970e27cae27Affected
6.6.130 to before 6.6.135Affected
6.12.78 to before 6.12.82Affected

LinuxLinux

6.14Affected
before 6.14Not affected
6.6.135 through 6.6.*Not affected
6.12.82 through 6.12.*Not affected
6.14.2 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.