Medium severity · published Sep 4, 2025
CVE-2025-38706
ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
5.5
CVSS
0.2%
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() snd_soc_remove_pcm_runtime() might be called with rtd == NULL which will leads to null pointer dereference. This was reproduced with topology loading and marking a link as ignore due to missing hardware component on the system. On module removal the soc_tplg_remove_link() would call snd_soc_remove_pcm_runtime() with rtd == NULL since the link was ignored, no runtime was created.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
5.6 before 5.10.241; 5.11 before 5.15.190; 5.16 before 6.1.149; 6.2 before 6.6.103; 6.7 before 6.12.43; 6.13 before 6.15.11; +1 more · source: NVD
LI
Linux · Linux
50cd9b5317d5593d0a33f4227f56ddcc1bf66604 before 8b465bedc2b417fd27c1d1ab7122882b4b60b1a0; 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 before 82ba7b8cf9f6e3bf392a9f08ba3d1c0b200ccb94; 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 before 7f8fc03712194fd4e2df28af7f7f7a38205934ef; 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 before 41f53afe53a57a7c50323f99424b598190acf192; 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 before 2fce20decc6a83f16dd73744150c4e7ea6c97c21; 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 before cecc65827ef3df9754e097582d89569139e6cd1e; +3 more · source: vendor
DL
Debian Linux · Debian
11.0 · source: NVD
SC
SIMATIC CN 4100 · Siemens
before V5.0 · source: CISA