CVE-2025-40121

ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping

State: Published
Severity: Not scored
Published: Nov 12, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping

When an invalid value is passed via quirk option, currently bytcr_rt5640 driver just ignores and leaves as is, which may lead to unepxected results like OOB access.

This patch adds the sanity check and corrects the input mapping to the certain default value if an invalid value is passed.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	64484ccee7af53f08cca2ee3853cb8e18914d8b2 to before bff827b0d507e52b23efab9f67c232a4f037ab2cAffected 64484ccee7af53f08cca2ee3853cb8e18914d8b2 to before 64a36a7032082b4c330ce081acb6efb99246020eAffected 64484ccee7af53f08cca2ee3853cb8e18914d8b2 to before 95e29db33b5f73218ae08ebb48c61c9a8d28e2ffAffected 64484ccee7af53f08cca2ee3853cb8e18914d8b2 to before 2204e582b4eea872e1e7a5c90edcb84b928c68b0Affected 64484ccee7af53f08cca2ee3853cb8e18914d8b2 to before f197894de2f4ef46c7d53827d9df294b75c35e13Affected 64484ccee7af53f08cca2ee3853cb8e18914d8b2 to before fdf99978a6480e14405212472b6c747e0fa43bedAffected 64484ccee7af53f08cca2ee3853cb8e18914d8b2 to before c60f269c123210a6846d6d1367de0eaa402c10b0Affected 64484ccee7af53f08cca2ee3853cb8e18914d8b2 to before 4336efb59ef364e691ef829a73d9dbd4d5ed7c7bAffected
LinuxLinux	4.18Affected before 4.18Not affected 5.4.301 through 5.4.Not affected 5.10.246 through 5.10.Not affected 5.15.195 through 5.15.Not affected 6.1.156 through 6.1.Not affected 6.6.112 through 6.6.Not affected 6.12.53 through 6.12.Not affected 6.17.3 through 6.17.*Not affected 6.18 and laterNot affected

Product

Versions

LinuxLinux

64484ccee7af53f08cca2ee3853cb8e18914d8b2 to before bff827b0d507e52b23efab9f67c232a4f037ab2cAffected
64484ccee7af53f08cca2ee3853cb8e18914d8b2 to before 64a36a7032082b4c330ce081acb6efb99246020eAffected
64484ccee7af53f08cca2ee3853cb8e18914d8b2 to before 95e29db33b5f73218ae08ebb48c61c9a8d28e2ffAffected
64484ccee7af53f08cca2ee3853cb8e18914d8b2 to before 2204e582b4eea872e1e7a5c90edcb84b928c68b0Affected
64484ccee7af53f08cca2ee3853cb8e18914d8b2 to before f197894de2f4ef46c7d53827d9df294b75c35e13Affected
64484ccee7af53f08cca2ee3853cb8e18914d8b2 to before fdf99978a6480e14405212472b6c747e0fa43bedAffected
64484ccee7af53f08cca2ee3853cb8e18914d8b2 to before c60f269c123210a6846d6d1367de0eaa402c10b0Affected
64484ccee7af53f08cca2ee3853cb8e18914d8b2 to before 4336efb59ef364e691ef829a73d9dbd4d5ed7c7bAffected

LinuxLinux

4.18Affected
before 4.18Not affected
5.4.301 through 5.4.*Not affected
5.10.246 through 5.10.*Not affected
5.15.195 through 5.15.*Not affected
6.1.156 through 6.1.*Not affected
6.6.112 through 6.6.*Not affected
6.12.53 through 6.12.*Not affected
6.17.3 through 6.17.*Not affected
6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.