CVE-2025-40132

ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback

N/A
Published: November 12, 2025 at 10:23 AM UTC
Updated: October 19, 2026 at 09:10 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback In create_sdw_dailink() check that sof_end->codec_info->add_sidecar is not NULL before calling it. The original code assumed that if include_sidecar is true, the codec on that link has an add_sidecar callback. But there could be other codecs on the same link that do not have an add_sidecar callback.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.10da5244180281a18c4c7859674fec308514aaf629
Vendor states this is fixed in 87cab86925b7fa4c1c977bc191ac549a3b23f0ea (fixed)
Vendor states this is fixed in a5416c0fc9e77b69f853dfb1e78bc05a7c06a789 (fixed)
Vendor states this is fixed in aea038062edfca9c6e5ddcecd4611d5a80113b4e (fixed)
Vendor states this is fixed in 6.10 (unaffected)
Vendor states this is fixed in 6.12.53 (unaffected)
Vendor states this is fixed in 6.17.3 (unaffected)
Vendor states this is fixed in 6.18 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card