PT-2025-49791
CVE-2025-40338
·
Published
2025-01-01
·
Updated
2026-10-17
Description by
CVSS 3.1
5.2
MediumMetricsAV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel's ASoC (Advanced Linux Sound Architecture) Intel AVS (Audio Video System) component. Sharing the
name pointer directly between components can lead to use-after-free errors when components are shut down. The issue is addressed by duplicating the name to prevent this. The framework does not override the component's name if it is set before the initializer is invoked.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾