Riskcovery

CVE-2025-40344

ASoC: Intel: avs: Disable periods-elapsed work when closing PCM

State
Published
Severity
7.8 High
Published
Dec 9, 2025
Updated
Oct 15, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: Intel: avs: Disable periods-elapsed work when closing PCM

avs_dai_fe_shutdown() handles the shutdown procedure for HOST HDAudio stream while period-elapsed work services its IRQs. As the former frees the DAI's private context, these two operations shall be synchronized to avoid slab-use-after-free or worse errors.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0dbb186c3510cad4e9f443e801bf2e6ab5770c00 to before ca6d2b7aca778afbf8c0c4b330d10cb228c14052Affected
  • 0dbb186c3510cad4e9f443e801bf2e6ab5770c00 to before b41fca4aa60be896ba8a81b57aac5dcc6eee66c0Affected
  • 0dbb186c3510cad4e9f443e801bf2e6ab5770c00 to before 845f716dc5f354c719f6fda35048b6c2eca99331Affected
  • 31087af37d6b1586b76d4acf3e0c1634a4617ba6Affected
  • 6.11.9 to before 6.12Affected
LinuxLinux
  • 6.12Affected
  • before 6.12Not affected
  • 6.12.58 through 6.12.*Not affected
  • 6.17.8 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.