PT-2025-46596 · Intel+4 · Intel Bytcr Rt5651+4

Published 2025-09-02 · Updated 2026-05-07 · CVE-2025-40121

Positive Technologies (AI Summary)

CVSS v2.0

2.7

Low

Base vector

AV:A/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel related to the ASoC Intel bytcr rt5651 driver. An invalid value passed through a quirk option is not properly handled, potentially leading to out-of-bounds access. The patch introduces a sanity check and corrects the input mapping to a default value if an invalid value is provided.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2025-15348

CVE-2025-40121

DLA-4379-1

DLA-4404-1

OPENSUSE-SU-2025:20172-1

SUSE-SU-2025:4393-1

SUSE-SU-2025:4422-1

SUSE-SU-2025:4505-1

SUSE-SU-2025:4506-1

SUSE-SU-2025:4516-1

SUSE-SU-2025:4517-1

SUSE-SU-2025:4521-1

SUSE-SU-2025:4530-1

SUSE-SU-2026:0029-1

SUSE-SU-2026:0032-1

SUSE-SU-2026:0033-1

SUSE-SU-2026:0034-1

SUSE-SU-2026:20012-1

SUSE-SU-2026:20015-1

SUSE-SU-2026:20021-1

SUSE-SU-2026:20039-1

SUSE-SU-2026:20059-1

SUSE-SU-2026:20473-1

SUSE-SU-2026:20496-1

USN-8029-1

USN-8029-2

USN-8029-3

USN-8030-1

USN-8033-1

USN-8033-2

USN-8033-3

USN-8033-4

USN-8033-5

USN-8033-6

USN-8033-7

USN-8033-8

USN-8034-1

USN-8034-2

USN-8048-1

USN-8095-1

USN-8095-2

USN-8095-3

USN-8095-4

USN-8095-5

USN-8100-1

USN-8125-1

USN-8126-1

USN-8141-1

USN-8163-1

USN-8163-2

USN-8165-1

USN-8243-1

USN-8261-1

Affected Products

Debian

Intel Bytcr Rt5651

Linuxmint

Linux Kernel

Ubuntu

References · 2012

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40121.json · Exploit
• https://ubuntu.com/security/CVE-2025-38055 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40092 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21833 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39788 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38251 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38543 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8030-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23026 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40284 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2025-40121 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4506-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68803 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40307 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37844 · Vendor Advisory