CVE-2025-21870: ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.17-1 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.1.191 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.6.160 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.12.17 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.13.5 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21870?
The severity of CVE-2025-21870 is currently classified as medium risk.
How do I fix CVE-2025-21870?
To fix CVE-2025-21870, make sure to apply the latest Linux kernel updates that address this vulnerability.
What systems are affected by CVE-2025-21870?
CVE-2025-21870 affects various versions of the Linux kernel.
What types of attacks could exploit CVE-2025-21870?
CVE-2025-21870 could potentially be exploited to cause a denial of service or incorrect processing in audio path components.
Is there a workaround for CVE-2025-21870 before a patch is applied?
As of now, there are no known workarounds for CVE-2025-21870, so updating the kernel is the recommended action.