CVE-2025-40097 — Linux vulnerability
16 documents7 sources
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 93.65%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 30
Latest updateFeb 24
Description
In the Linux kernel, the following vulnerability has been resolved:
ALSA: hda: Fix missing pointer check in hda_component_manager_init function
The __component_match_add function may assign the 'matchptr' pointer
the value ERR_PTR(-ENOMEM), which will subsequently be dereferenced.
The call stack leading to the error looks like this:
hda_component_manager_init
|-> component_match_add
|-> component_match_add_release
|-> __component_match_add ( ... ,**matchptr, ... )
|-> *matchptr = ERR_PTR(-EN…
Affected Packages6 packages
▶CVEListV5linux/linuxae7abe36e352eddf8e30d3b1ea3fb402514ba13b — 218a8504e62fc2c8a1fd12523346b7a2b9bd2474+3
🔴Vulnerability Details
8📋Vendor Advisories
7Red Hat
▶