Riskcovery

CVE-2025-40132

ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback

State
Published
Severity
Not scored
Published
Nov 12, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback

In create_sdw_dailink() check that sof_end->codec_info->add_sidecar is not NULL before calling it.

The original code assumed that if include_sidecar is true, the codec on that link has an add_sidecar callback. But there could be other codecs on the same link that do not have an add_sidecar callback.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • da5244180281a18c4c7859674fec308514aaf629 to before aea038062edfca9c6e5ddcecd4611d5a80113b4eAffected
  • da5244180281a18c4c7859674fec308514aaf629 to before a5416c0fc9e77b69f853dfb1e78bc05a7c06a789Affected
  • da5244180281a18c4c7859674fec308514aaf629 to before 87cab86925b7fa4c1c977bc191ac549a3b23f0eaAffected
LinuxLinux
  • 6.10Affected
  • before 6.10Not affected
  • 6.12.53 through 6.12.*Not affected
  • 6.17.3 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.