Riskcovery

CVE-2025-40162

ASoC: amd/sdw_utils: avoid NULL deref when devm_kasprintf() fails

State
Published
Severity
Not scored
Published
Nov 12, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: amd/sdw_utils: avoid NULL deref when devm_kasprintf() fails

devm_kasprintf() may return NULL on memory allocation failure, but the debug message prints cpus->dai_name before checking it. Move the dev_dbg() call after the NULL check to prevent potential NULL pointer dereference.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • cb8ea62e6402067ba092d4c1d66a9440513a572b to before 095d692e5997ece300c89f10d903d5230090e6a0Affected
  • cb8ea62e6402067ba092d4c1d66a9440513a572b to before a1cccbd19676fc36854535a7118ba2c27d0b84b3Affected
  • cb8ea62e6402067ba092d4c1d66a9440513a572b to before 5726b68473f7153a7f6294185e5998b7e2a230a2Affected
LinuxLinux
  • 6.12Affected
  • before 6.12Not affected
  • 6.12.55 through 6.12.*Not affected
  • 6.17.5 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.