CVE-2025-40344

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s ASoC (Advanced Linux Sound Architecture) Intel avs (Audio Video Stream) component. Specifically, the avs dai fe shutdown() function, responsible for shutting down a HOST HDAudio stream, can lead to errors when interacting with period-elapsed work that is still servicing interrupts. This occurs because the shutdown procedure frees the DAI’s private context while the period-elapsed work is still active, potentially resulting in a slab-use-after-free condition or other errors. The avs dai fe shutdown() function handles the shutdown procedure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.