cbcvebase.
CVE-2025-40154
published 2025-11-12

CVE-2025-40154: In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping When an invalid value is passed…

PriorityP422high7.8
EPSS
0.19%
9.2th percentile
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping When an invalid value is passed via quirk option, currently bytcr_rt5640 driver only shows an error message but leaves as is. This may lead to unepxected results like OOB access. This patch corrects the input mapping to the certain default value if an invalid value is passed.

Affected

31 ranges· showing 25
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.158-1 (bookworm)linux 6.1.158-1 (bookworm)
debianlinux-6.1< linux 6.1.158-1 (bookworm)linux 6.1.158-1 (bookworm)
linuxlinux
linuxlinux>= 063422ca2a9de238401c3848c1b3641c07b6316c < 2c27e047bdcba457ec953f7e90e4ed6d5f8aeb012c27e047bdcba457ec953f7e90e4ed6d5f8aeb01
linuxlinux>= 063422ca2a9de238401c3848c1b3641c07b6316c < a97b4d18ecb012c5624cdf2cab2ce5e1312fdd5da97b4d18ecb012c5624cdf2cab2ce5e1312fdd5d
linuxlinux>= 063422ca2a9de238401c3848c1b3641c07b6316c < dea9c8c9028c9374761224a7f9d824e845a2aa2edea9c8c9028c9374761224a7f9d824e845a2aa2e
linuxlinux>= 063422ca2a9de238401c3848c1b3641c07b6316c < f58fca15f3bf8b982e799c31e4afa8923788aa40f58fca15f3bf8b982e799c31e4afa8923788aa40
linuxlinux>= 063422ca2a9de238401c3848c1b3641c07b6316c < 29a41bf6422688f0c5a09b18222e1a64b2629fa429a41bf6422688f0c5a09b18222e1a64b2629fa4
linuxlinux>= 063422ca2a9de238401c3848c1b3641c07b6316c < 5c03ea2ef4ebba75c69c90929d8590eb3d3797a95c03ea2ef4ebba75c69c90929d8590eb3d3797a9
linuxlinux>= 063422ca2a9de238401c3848c1b3641c07b6316c < 48880f3cdf2b6d8dcd91219c5b5c8a752641132248880f3cdf2b6d8dcd91219c5b5c8a7526411322
linuxlinux>= 063422ca2a9de238401c3848c1b3641c07b6316c < fba404e4b4af4f4f747bb0e41e9fff7d03c7bcc0fba404e4b4af4f4f747bb0e41e9fff7d03c7bcc0
linuxlinux_kernel>= 0 < 5.10.247-15.10.247-1
linuxlinux_kernel>= 0 < 6.1.158-16.1.158-1
linuxlinux_kernel>= 0 < 6.12.57-16.12.57-1
linuxlinux_kernel>= 0 < 6.17.6-16.17.6-1
linuxlinux_kernel>= 0 < 5.15.0-170.1805.15.0-170.180
linuxlinux_kernel>= 0 < 6.8.0-106.1066.8.0-106.106
linuxlinux_kernel>= 0 < 6.17.0-14.146.17.0-14.14
linuxlinux_kernel>= 4.18.0 < 5.4.3015.4.301
linuxlinux_kernel>= 5.11.0 < 5.15.1955.15.195
linuxlinux_kernel>= 5.16.0 < 6.1.1566.1.156
linuxlinux_kernel>= 5.5.0 < 5.10.2465.10.246
linuxlinux_kernel>= 6.13.0 < 6.17.36.17.3
linuxlinux_kernel>= 6.2.0 < 6.6.1126.6.112
linuxlinux_kernel>= 6.7.0 < 6.12.536.12.53

CVSS provenance

osv7.8HIGH
vendor_ubuntu7.8HIGH
vendor_redhat7.0MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.