CVE-2025-40162 — Linux vulnerability
15 documents6 sources
Severity
4.0MEDIUM
No vectorEPSS
0.0%
top 94.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 12
Latest updateFeb 24
Description
In the Linux kernel, the following vulnerability has been resolved:
ASoC: amd/sdw_utils: avoid NULL deref when devm_kasprintf() fails
devm_kasprintf() may return NULL on memory allocation failure,
but the debug message prints cpus->dai_name before checking it.
Move the dev_dbg() call after the NULL check to prevent potential
NULL pointer dereference.
Affected Packages5 packages
▶CVEListV5linux/linuxcb8ea62e6402067ba092d4c1d66a9440513a572b — 095d692e5997ece300c89f10d903d5230090e6a0+3