CVE-2025-39765

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.15.8

Description: A flaw exists in the Linux kernel's ALSA timer functionality. Specifically, within the snd utimer create() function, a potential issue arises if the kasprintf() function returns NULL. This can lead to a call to snd utimer put id(), which subsequently attempts to free an unallocated ID (0) using ida free(). This condition was reported by the syzkaller fuzzer.

Recommendations: Update to Linux kernel version 6.15.8 or later.