CVE-2025-38706

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The snd soc remove pcm runtime() function may be called with rtd equal to NULL, leading to a null pointer dereference. This issue was reproduced during topology loading and when a link was marked as ignored due to a missing hardware component. During module removal, soc tplg remove link() calls snd soc remove pcm runtime() with rtd equal to NULL because no runtime was created for the ignored link.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.