vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2025-40154

ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping

N/A
Published: November 12, 2025 at 10:23 AM UTC
Updated: October 19, 2026 at 09:10 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%
SSVC
No known exploit

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping When an invalid value is passed via quirk option, currently bytcr_rt5640 driver only shows an error message but leaves as is. This may lead to unepxected results like OOB access. This patch corrects the input mapping to the certain default value if an invalid value is passed.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
063422ca2a9de238401c3848c1b3641c07b6316c4.1863422ca2a9de238401c3848c1b3641c7b6316c
Vendor states this is fixed in 29a41bf6422688f0c5a09b18222e1a64b2629fa4 (fixed)
Vendor states this is fixed in 2c27e047bdcba457ec953f7e90e4ed6d5f8aeb01 (fixed)
Vendor states this is fixed in 48880f3cdf2b6d8dcd91219c5b5c8a7526411322 (fixed)
Vendor states this is fixed in 5c03ea2ef4ebba75c69c90929d8590eb3d3797a9 (fixed)
Vendor states this is fixed in a97b4d18ecb012c5624cdf2cab2ce5e1312fdd5d (fixed)
Vendor states this is fixed in dea9c8c9028c9374761224a7f9d824e845a2aa2e (fixed)
Vendor states this is fixed in f58fca15f3bf8b982e799c31e4afa8923788aa40 (fixed)
Vendor states this is fixed in fba404e4b4af4f4f747bb0e41e9fff7d03c7bcc0 (fixed)
Vendor states this is fixed in 4.18 (unaffected)
Vendor states this is fixed in 5.10.246 (unaffected)
Vendor states this is fixed in 5.15.195 (unaffected)
Vendor states this is fixed in 5.4.301 (unaffected)
Vendor states this is fixed in 6.1.156 (unaffected)
Vendor states this is fixed in 6.12.53 (unaffected)
Vendor states this is fixed in 6.17.3 (unaffected)
Vendor states this is fixed in 6.18 (unaffected)
Vendor states this is fixed in 6.6.112 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (8)

Source: cverecord
https://git.kernel.org/stable/c/2c27e047bdcba457ec953f7e90e4ed6d5f8aeb01
Source: cverecord
https://git.kernel.org/stable/c/a97b4d18ecb012c5624cdf2cab2ce5e1312fdd5d
Source: cverecord
https://git.kernel.org/stable/c/dea9c8c9028c9374761224a7f9d824e845a2aa2e
Source: cverecord
https://git.kernel.org/stable/c/f58fca15f3bf8b982e799c31e4afa8923788aa40
Source: cverecord
https://git.kernel.org/stable/c/29a41bf6422688f0c5a09b18222e1a64b2629fa4
Source: cverecord
https://git.kernel.org/stable/c/5c03ea2ef4ebba75c69c90929d8590eb3d3797a9
Source: cverecord
https://git.kernel.org/stable/c/48880f3cdf2b6d8dcd91219c5b5c8a7526411322
Source: cverecord
https://git.kernel.org/stable/c/fba404e4b4af4f4f747bb0e41e9fff7d03c7bcc0

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card