PT-2025-22195

CVE-2025-37934

·

Published

2025-04-30

·

Updated

2026-02-03

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue concerns a pointer check in the graph util parse link direction function within the Linux kernel's ASoC simple-card-utils. The problem arises when the function fails to validate the passed pointers before writing to them, potentially leading to invalid operations. This also addresses a UBSAN warning related to an invalid load in the imx-card.c file, caused by an uninitialized playback only variable.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
SUSE-SU-2025:02254-1
SUSE-SU-2025_02254-1
SUSE-SU-2025:02307-1
SUSE-SU-2025_02307-1
SUSE-SU-2025:02333-1
SUSE-SU-2025_02333-1
USN-7649-1
USN-7649-2
USN-7650-1
USN-7665-1
USN-7665-2
USN-7721-1
Found an issue in the description? Have something to add? Feel free to write us 👾