PT-2025-52881 · Unknown+4 · Cs35L41 Codec+4

Published 2025-12-05 · Updated 2026-05-11 · CVE-2025-68345

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to the ALSA subsystem and the cs35l41 codec. Specifically, the cs35l41 hda read acpi() function may experience a NULL pointer dereference if acpi get first physical node() returns NULL. This occurs because the returned NULL value is not checked before being dereferenced, potentially leading to a system crash. The issue was discovered by the Linux Verification Center using SVACE.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Improper Resource Release

Weakness Enumeration

CWE-476

CWE-404

Related Identifiers

AZL-73066

BDU:2026-01162

CVE-2025-68345

ECHO-E069-DDBE-4802

OPENSUSE-SU-2026:10039-1

OPENSUSE-SU-2026:10301-1

OPENSUSE-SU-2026:20145-1

SUSE-SU-2026:0278-1

SUSE-SU-2026:0281-1

SUSE-SU-2026:0293-1

SUSE-SU-2026:0315-1

SUSE-SU-2026:20207-1

SUSE-SU-2026:20220-1

SUSE-SU-2026:20228-1

SUSE-SU-2026:20477-1

SUSE-SU-2026:20498-1

SUSE-SU-2026:20845-1

SUSE-SU-2026:20876-1

USN-8094-1

USN-8094-2

USN-8094-3

USN-8094-4

USN-8094-5

USN-8152-1

USN-8179-1

USN-8179-2

USN-8179-3

USN-8179-4

USN-8184-1

USN-8185-1

USN-8185-2

USN-8203-1

USN-8204-1

USN-8258-1

USN-8260-1

USN-8261-1

USN-8265-1

Affected Products

Debian

Linuxmint

Linux Kernel

Ubuntu

Cs35L41 Codec

References · 2407

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68345.json · Exploit
• https://ubuntu.com/security/CVE-2025-71095 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40051 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68307 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68818 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40315 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39829 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68728 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71078 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40249 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68330 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40100 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68333 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39805 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68215 · Vendor Advisory