CVE-2025-37793

MediumCVSS 5.5/10Last modified Nov 5, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe()

devm_kasprintf() returns NULL when memory allocation fails. Currently, avs_component_probe() does not check for this case, which results in a NULL pointer dereference.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 739c031110da9ba966b0189fa25a2a1c0d42263c, < aaa93b8846101461de815759d39979661b82d5a5; >= 739c031110da9ba966b0189fa25a2a1c0d42263c, < 23fde311ea1d0a6c36bf92ce48b90b77d0ece1a4; >= 739c031110da9ba966b0189fa25a2a1c0d42263c, < c2825073271b6f15e669a424b363612082494863; >= 739c031110da9ba966b0189fa25a2a1c0d42263c, < 95f723cf141b95e3b3a5b92cf2ea98a863fe7275
LinuxLinux6.6

References

Timeline

Published
May 1, 2025
Last modified
Nov 5, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-377945.5In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Purge vif txq in ieee80211_do_stop() After ieee80211_dCVE-2025-377967.8In the Linux kernel, the following vulnerability has been resolved: wifi: at76c50x: fix use after free access in at76_disconnect The memorCVE-2025-377977.8In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF vulnerability in class handling This patch CVE-2025-377987.8In the Linux kernel, the following vulnerability has been resolved: codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() AftCVE-2025-377995.5In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp vmxnet3 drCVE-2025-37806.5The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to unautCVE-2025-378005.5In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential NULL pointer dereference in dev_uevent() IfCVE-2025-378015.5In the Linux kernel, the following vulnerability has been resolved: spi: spi-imx: Add check for spi_imx_setupxfer() Add check for the retuCVE-2025-378025.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING" wait_CVE-2025-378037.8In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix a buf size overflow issue during udmabuf creation by castCVE-2025-378055.5In the Linux kernel, the following vulnerability has been resolved: sound/virtio: Fix cancel_sync warnings on uninitialized work_structs BCVE-2025-378065.5In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Keep write operations atomic syzbot reported a NULL pointer
CVE-2025-37793: Medium severity, CVSS 5.5 | Vulnix