CVE-2025-21847

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A null pointer dereference issue exists in the Linux kernel. The problem arises from not checking the nullity of cstream in the sof ipc msg data() function, similar to the check performed in the sof set stream data offset() function. This can lead to a null pointer dereference when sps->stream is null.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.