CVE-2025-38706

MediumCVSS 5.5/10Last modified Nov 5, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()

snd_soc_remove_pcm_runtime() might be called with rtd == NULL which will leads to null pointer dereference. This was reproduced with topology loading and marking a link as ignore due to missing hardware component on the system. On module removal the soc_tplg_remove_link() would call snd_soc_remove_pcm_runtime() with rtd == NULL since the link was ignored, no runtime was created.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604, < 8b465bedc2b417fd27c1d1ab7122882b4b60b1a0; >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604, < 82ba7b8cf9f6e3bf392a9f08ba3d1c0b200ccb94; >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604, < 7f8fc03712194fd4e2df28af7f7f7a38205934ef; >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604, < 41f53afe53a57a7c50323f99424b598190acf192; >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604, < 2fce20decc6a83f16dd73744150c4e7ea6c97c21; >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604, < cecc65827ef3df9754e097582d89569139e6cd1e; >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604, < 7ce0a7255ce97ed7c54afae83fdbce712a1f0c9e; >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604, < 2d91cb261cac6d885954b8f5da28b5c176c18131
LinuxLinux5.6
SiemensSIMATIC CN 4100< V5.0

References

Timeline

Published
Sep 4, 2025
Last modified
Nov 5, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-387077.8In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add sanity check for file name The length of the file name sCVE-2025-387087.8In the Linux kernel, the following vulnerability has been resolved: drbd: add missing kref_get in handle_write_conflicts With `two-primariCVE-2025-387095.5In the Linux kernel, the following vulnerability has been resolved: loop: Avoid updating block size under exclusive owner Syzbot came up wCVE-2025-38715.3Broken access control in Fortra's GoAnywhere MFT prior to 7.8.1 allows an attacker to create a denial of service situation when configured tCVE-2025-387105.5In the Linux kernel, the following vulnerability has been resolved: gfs2: Validate i_depth for exhash directories A fuzzer test introducedCVE-2025-387115.5In the Linux kernel, the following vulnerability has been resolved: smb/server: avoid deadlock when linking with ReplaceIfExists If smb2_cCVE-2025-387125.5In the Linux kernel, the following vulnerability has been resolved: hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() When tCVE-2025-387137.1In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() The hfsplus_CVE-2025-387147.1In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() The hfsplus_bnCVE-2025-387157.1In the Linux kernel, the following vulnerability has been resolved: hfs: fix slab-out-of-bounds in hfs_bnode_read() This patch introduces CVE-2025-387165.5In the Linux kernel, the following vulnerability has been resolved: hfs: fix general protection fault in hfs_find_init() The hfs_find_initCVE-2025-387174.7In the Linux kernel, the following vulnerability has been resolved: net: kcm: Fix race condition in kcm_unattach() syzbot found a race con
CVE-2025-38706: Medium severity, CVSS 5.5 | Vulnix