CVE-2025-40338 — Linux vulnerability
17 documents8 sources
Severity
5.2MEDIUM
No vectorEPSS
0.0%
top 89.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 9
Latest updateFeb 24
Description
In the Linux kernel, the following vulnerability has been resolved:
ASoC: Intel: avs: Do not share the name pointer between components
By sharing 'name' directly, tearing down components may lead to
use-after-free errors. Duplicate the name to avoid that.
At the same time, update the order of operations - since commit
cee28113db17 ("ASoC: dmaengine_pcm: Allow passing component name via
config") the framework does not override component->name if set before
invoking the initializer.
Affected Packages6 packages
▶CVEListV5linux/linuxf1b3b320bd6519b16e3480f74f2926d106e3bcba — 128bf29c992988f8b4f3829227339908fde5ec86+2