CVE-2025-68345: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()
In the Linux kernel, the following vulnerability has been resolved:
ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41hdareadacpi()
The acpigetfirstphysicalnode() function can return NULL, in which case the getdevice() function also returns NULL, but this value is then dereferenced without checking,so add a check to prevent a crash.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68345?
CVE-2025-68345 has been rated as a high severity vulnerability due to the potential for NULL pointer dereferences leading to unexpected behavior.
How do I fix CVE-2025-68345?
To resolve CVE-2025-68345, update the Linux kernel to the latest stable version where the vulnerability has been patched.
What versions of the Linux kernel are affected by CVE-2025-68345?
CVE-2025-68345 affects several versions of the Linux kernel prior to the release containing the patch.
What impact does CVE-2025-68345 have on system stability?
CVE-2025-68345 can lead to system instability and potential crashes due to NULL pointer dereferences.
Is CVE-2025-68345 actively being exploited?
As of now, there are no confirmed reports of active exploitation of CVE-2025-68345 in the wild.