PT-2025-40066 · Linux+1 · Linux Kernel+1

Published 2025-10-01 · Updated 2025-10-01 · CVE-2025-39892

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the ASoC (Advanced Linux Sound Architecture) core, specifically in the snd soc lookup component nolocked() function. This issue arises when the driver name is NULL, leading to a potential NULL pointer access error. The problem occurs in soc-generic-dmaengine-pcm.c where the same device is used for both CPU and Platform components. If the CPU component driver lacks a name (driver->name), accessing the driver name within snd soc lookup component nolocked() results in the error. The function strcmp is involved in the error trace.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2025-39892

Affected Products

Astra Linux

Linux Kernel

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39892.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-39892 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-39892 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-39892 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-39892 · Vendor Advisory
• https://git.kernel.org/stable/c/1d282dcd46d972be338085ae9e217462b366ce6e · Patch
• https://osv.dev/vulnerability/CVE-2025-39892 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-39892 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39892 · Vendor Advisory
• https://git.kernel.org/stable/c/168873ca1799d3f23442b9e79eae55f907b9b126 · Patch
• https://twitter.com/CVEnew/status/1973302184809746693 · Twitter Post
• https://git.kernel.org/linus/168873ca1799d3f23442b9e79eae55f907b9b126 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note