Riskcovery

CVE-2025-40045

ASoC: codecs: wcd937x: set the comp soundwire port correctly

State
Published
Severity
7.8 High
Published
Oct 28, 2025
Updated
Aug 5, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: codecs: wcd937x: set the comp soundwire port correctly

For some reason we endup with setting soundwire port for HPHL_COMP and HPHR_COMP as zero, this can potentially result in a memory corruption due to accessing and setting -1 th element of port_map array.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 82be8c62a38c6a44e64ecb29d7a9b5cb35c6cad4 to before abcd537aae3b84c6d10ad147e99a204bcb56b234Affected
  • 82be8c62a38c6a44e64ecb29d7a9b5cb35c6cad4 to before 1a1ca38392e7e896075afc8905ddaea525ed30f7Affected
  • 82be8c62a38c6a44e64ecb29d7a9b5cb35c6cad4 to before 66a940b1bf48a7095162688332d725ba160154ebAffected
LinuxLinux
  • 6.11Affected
  • before 6.11Not affected
  • 6.12.53 through 6.12.*Not affected
  • 6.17.3 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.