CVE-2025-39938: ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed
Published Oct 4, 2025
·Updated
ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed
Affected Software
13 affected componentsFixes available
Linux Linux kernel
Microsoft azl3 kernel 6.6.96.2-2
Microsoft azl3 kernel 6.6.104.2-4
Linux Linux kernel>=5.16<6.1.154
Linux Linux kernel>=6.2<6.6.108
Linux Linux kernel>=6.7<6.12.49
Linux Linux kernel>=6.13<6.16.9
Linux Linux kernel=6.17-rc1
Linux Linux kernel=6.17-rc2
Linux Linux kernel=6.17-rc3
Linux Linux kernel=6.17-rc4
Linux Linux kernel=6.17-rc5
Linux Linux kernel=6.17-rc6
Remediation
Event History
Oct 4, 2025
CVE Published
via MITRE·07:31 AM
Data Sourced
via MITRE·07:31 AM
Description
Data Sourced
via NVD·08:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Oct 5, 2025
Data Sourced
via Microsoft·01:02 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·01:02 AM
Affected Software
Updated
via Microsoft·01:02 AM
DescriptionSeverity
Updated
via Microsoft·01:02 AM
Affected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-39938?
CVE-2025-39938 has been classified as a medium-severity vulnerability due to the potential for a NULL pointer dereference.
2
How do I fix CVE-2025-39938?
To fix CVE-2025-39938, update your Linux kernel to the latest stable version where this vulnerability has been resolved.
3
What does CVE-2025-39938 affect?
CVE-2025-39938 affects the Linux kernel specifically related to the ASoC (ALSA System on Chip) framework.
4
What is the impact of exploiting CVE-2025-39938?
Exploiting CVE-2025-39938 could lead to system instability or crashes due to NULL pointer dereference.
5
Is there a workaround for CVE-2025-39938?
Currently, the best approach is to apply the kernel update as no specific workarounds have been recommended.