PT-2025-49791 · Intel+4 · Intel Avs+4
CVE-2025-40338
·
Published
2025-01-01
·
Updated
2026-07-18
CVSS v3.1
5.2
Medium
| Vector | AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel's ASoC (Advanced Linux Sound Architecture) Intel AVS (Audio Video System) component. Sharing the
name pointer directly between components can lead to use-after-free errors when components are shut down. The issue is addressed by duplicating the name to prevent this. The framework does not override the component's name if it is set before the initializer is invoked.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Intel Avs
Linuxmint
Linux Kernel
Ubuntu