In the Linux kernel, the following vulnerability has been resolved:
ASoC: simple-card-utils: Fix pointer check in graph_util_parse_link_direction
Actually check if the passed pointers are valid, before writing to them.
This also fixes a USBAN warning:
UBSAN: invalid-load in ../sound/soc/fsl/imx-card.c:687:25
load of value 255 is not a valid value for type '_Bool'
This is because playback_only is uninitialized and is not written to, as
the playback-only property is absent.
References
Configurations
Configuration 1 (hide)
|
History
17 Nov 2025, 15:09
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://git.kernel.org/stable/c/3cc393d2232ec770b5f79bf0673d67702a3536c3 - Patch | |
| References | () https://git.kernel.org/stable/c/9b5b3088c4d1752253491705919bd7d067964288 - Patch | |
| References | () https://git.kernel.org/stable/c/b41a49d5435e0f76da320f231b7252800e8f736f - Patch | |
| First Time |
Linux linux Kernel
Linux |
|
| CPE | cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| CWE | NVD-CWE-noinfo |
Information
Published : 2025-05-20 16:15
Updated : 2025-11-17 15:09
NVD link : CVE-2025-37934
Mitre link : CVE-2025-37934
CVE.ORG link : CVE-2025-37934
JSON object : View
Products Affected
linux
- linux_kernel
CWE