PT-2025-25830 · Linux+4 · Linux Kernel+4
Published
2025-05-14
·
Updated
2026-02-05
·
CVE-2025-38056
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A use-after-free issue has been identified in the Linux kernel. The problem occurs when the
hda generic machine select() function appends -idisp to the tplg filename and stores it in the global variable snd soc acpi intel hda machines. When the module is unloaded, the memory is freed, resulting in a global variable pointing to freed memory. Reloading the module triggers a use-after-free. The issue is related to the devm kasprintf() function and the hda machine select.cold() function.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Ubuntu