CVE-2025-37793
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-37793
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-37793.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-37793
- Downstream
- Related
- Published
- 2025-05-01T13:07:25.516Z
- Modified
- 2025-11-20T09:15:01.154387Z
- Summary
- ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
ASoC: Intel: avs: Fix null-ptr-deref in avscomponentprobe()
devmkasprintf() returns NULL when memory allocation fails. Currently, avscomponent_probe() does not check for this case, which results in a NULL pointer dereference.
- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/23fde311ea1d0a6c36bf92ce48b90b77d0ece1a4
- https://git.kernel.org/stable/c/95f723cf141b95e3b3a5b92cf2ea98a863fe7275
- https://git.kernel.org/stable/c/aaa93b8846101461de815759d39979661b82d5a5
- https://git.kernel.org/stable/c/c2825073271b6f15e669a424b363612082494863
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced739c031110da9ba966b0189fa25a2a1c0d42263cFixedaaa93b8846101461de815759d39979661b82d5a5
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced739c031110da9ba966b0189fa25a2a1c0d42263cFixed23fde311ea1d0a6c36bf92ce48b90b77d0ece1a4
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced739c031110da9ba966b0189fa25a2a1c0d42263cFixedc2825073271b6f15e669a424b363612082494863
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced739c031110da9ba966b0189fa25a2a1c0d42263cFixed95f723cf141b95e3b3a5b92cf2ea98a863fe7275
Affected versions
v6.*
v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.12
v6.12-rc1
v6.12-rc2
v6.12-rc3
v6.12-rc4
v6.12-rc5
v6.12-rc6
v6.12-rc7
v6.12.1
v6.12.10
v6.12.11
v6.12.12
v6.12.13
v6.12.14
v6.12.15
v6.12.16
v6.12.17
v6.12.18
v6.12.19
v6.12.2
v6.12.20
v6.12.21
v6.12.22
v6.12.23
v6.12.24
v6.12.3
v6.12.4
v6.12.5
v6.12.6
v6.12.7
v6.12.8
v6.12.9
v6.13
v6.13-rc1
v6.13-rc2
v6.13-rc3
v6.13-rc4
v6.13-rc5
v6.13-rc6
v6.13-rc7
v6.14
v6.14-rc1
v6.14-rc2
v6.14-rc3
v6.14-rc4
v6.14-rc5
v6.14-rc6
v6.14-rc7
v6.14.1
v6.14.2
v6.14.3
v6.15-rc1
v6.5
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.3
v6.6.30
v6.6.31
v6.6.32
v6.6.33
v6.6.34
v6.6.35
v6.6.36
v6.6.37
v6.6.38
v6.6.39
v6.6.4
v6.6.40
v6.6.41
v6.6.42
v6.6.43
v6.6.44
v6.6.45
v6.6.46
v6.6.47
v6.6.48
v6.6.49
v6.6.5
v6.6.50
v6.6.51
v6.6.52
v6.6.53
v6.6.54
v6.6.55
v6.6.56
v6.6.57
v6.6.58
v6.6.59
v6.6.6
v6.6.60
v6.6.61
v6.6.62
v6.6.63
v6.6.64
v6.6.65
v6.6.66
v6.6.67
v6.6.68
v6.6.69
v6.6.7
v6.6.70
v6.6.71
v6.6.72
v6.6.73
v6.6.74
v6.6.75
v6.6.76
v6.6.77
v6.6.78
v6.6.79
v6.6.8
v6.6.80
v6.6.81
v6.6.82
v6.6.83
v6.6.84
v6.6.85
v6.6.86
v6.6.87
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7
Database specific
vanir_signatures
[
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "sound/soc/intel/avs/pcm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aaa93b8846101461de815759d39979661b82d5a5",
"digest": {
"line_hashes": [
"252750076195720439197906409034958140607",
"119534874297995199675914829835713086530",
"62922574398765349848876111910939894120"
],
"threshold": 0.9
},
"id": "CVE-2025-37793-112dba42"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "sound/soc/intel/avs/pcm.c",
"function": "avs_component_probe"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aaa93b8846101461de815759d39979661b82d5a5",
"digest": {
"length": 1777.0,
"function_hash": "158787064872844863032218094907469294860"
},
"id": "CVE-2025-37793-38870baa"
}
]