Riskcovery

CVE-2025-40013

ASoC: qcom: audioreach: fix potential null pointer dereference

State
Published
Severity
Not scored
Published
Oct 20, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: qcom: audioreach: fix potential null pointer dereference

It is possible that the topology parsing function audioreach_widget_load_module_common() could return NULL or an error pointer. Add missing NULL check so that we do not dereference it.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 36ad9bf1d93d66b901342eab9f8ed6c1537655a6 to before 9c1ad4192f3d2fc85339718a6252cb3337848f7bAffected
  • 36ad9bf1d93d66b901342eab9f8ed6c1537655a6 to before 70e1e5fe9f7e05ff831b56ebc02543e7811b8e18Affected
  • 36ad9bf1d93d66b901342eab9f8ed6c1537655a6 to before 4dda55d04caac3b4102c26e29b1c27fa35636be3Affected
  • 36ad9bf1d93d66b901342eab9f8ed6c1537655a6 to before 8f9c9fafc0e7a73bbff58954d171c016ddee1734Affected
  • 36ad9bf1d93d66b901342eab9f8ed6c1537655a6 to before ef08ce6304d30b5778035d07b04514cb70839983Affected
  • 36ad9bf1d93d66b901342eab9f8ed6c1537655a6 to before 8318e04ab2526b155773313b66a1542476ce1106Affected
LinuxLinux
  • 5.16Affected
  • before 5.16Not affected
  • 6.1.156 through 6.1.*Not affected
  • 6.6.110 through 6.6.*Not affected
  • 6.12.51 through 6.12.*Not affected
  • 6.16.11 through 6.16.*Not affected
  • 6.17.1 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.