CVE-2025-40045: ASoC: codecs: wcd937x: set the comp soundwire port correctly
In the Linux kernel, the following vulnerability has been resolved:
ASoC: codecs: wcd937x: set the comp soundwire port correctly
For some reason we endup with setting soundwire port for HPHLCOMP and HPHRCOMP as zero, this can potentially result in a memory corruption due to accessing and setting -1 th element of portmap array.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40045?
CVE-2025-40045 has a medium severity rating due to its potential for memory corruption.
How do I fix CVE-2025-40045?
Fix CVE-2025-40045 by updating your Linux kernel to the latest stable version that includes the patch.
What systems are affected by CVE-2025-40045?
CVE-2025-40045 affects various distributions of the Linux kernel that utilize the affected audio codec configuration.
What are the consequences of CVE-2025-40045 exploitation?
Exploitation of CVE-2025-40045 could lead to memory corruption, potentially allowing for elevated privileges or system instability.
Is CVE-2025-40045 a hardware or software vulnerability?
CVE-2025-40045 is a software vulnerability found within the Linux kernel specifically related to audio codec handling.