CVE-2025-40132: ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback
In the Linux kernel, the following vulnerability has been resolved:
ASoC: Intel: sofsdw: Prevent jump to NULL addsidecar callback
In createsdwdailink() check that sofend->codecinfo->addsidecar is not NULL before calling it.
The original code assumed that if includesidecar is true, the codec on that link has an addsidecar callback. But there could be other codecs on the same link that do not have an addsidecar callback.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40132?
CVE-2025-40132 has been categorized as a medium severity vulnerability within the Linux kernel.
How do I fix CVE-2025-40132?
To remediate CVE-2025-40132, ensure that you update your Linux kernel to the latest version that includes the patch addressing this vulnerability.
What component is affected by CVE-2025-40132?
CVE-2025-40132 affects the ASoC Intel driver in the Linux kernel, specifically related to the handling of sidecar callbacks.
What does CVE-2025-40132 exploit?
CVE-2025-40132 can potentially lead to a NULL pointer dereference when certain conditions are met in the Intel ASoC driver.
Is CVE-2025-40132 remote exploitable?
CVE-2025-40132 is not known to be remotely exploitable but could be triggered by local attackers with appropriate access.