CVE-2025-39935: ASoC: codec: sma1307: Fix memory corruption in sma1307_setting_loaded()
In the Linux kernel, the following vulnerability has been resolved:
ASoC: codec: sma1307: Fix memory corruption in sma1307settingloaded()
The sma1307->set.headersize is how many integers are in the header (there are 8 of them) but instead of allocating space of 8 integers we allocate 8 bytes. This leads to memory corruption when we copy data it on the next line:
memcpy(sma1307->set.header, data, sma1307->set.headersize sizeof(int));
Also since we're immediately copying over the memory in ->set.header, there is no need to zero it in the allocator. Use devmkmallocarray() to allocate the memory instead.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39935?
CVE-2025-39935 is classified as a memory corruption vulnerability in the Linux kernel.
How do I fix CVE-2025-39935?
To fix CVE-2025-39935, update the Linux kernel to the latest stable version that includes the patch.
Which versions of the Linux kernel are affected by CVE-2025-39935?
CVE-2025-39935 affects certain versions of the Linux kernel prior to the patch implementation.
What impact does CVE-2025-39935 have on system security?
CVE-2025-39935 can lead to potential memory corruption, which may allow for arbitrary code execution in affected systems.
Is CVE-2025-39935 being actively exploited?
As of the latest reports, there is no indication that CVE-2025-39935 is actively being exploited in the wild.