In the Linux kernel, the following vulnerability has been resolved:
ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak.
sof_pdata->tplg_filename can have address allocated by kstrdup() and can be overwritten. Memory leak was detected with kmemleak:
unreferenced object 0xffff88812391ff60 (size 16): comm "kworker/4:1", pid 161, jiffies 4294802931 hex dump (first 16 bytes): 73 6f 66 2d 68 64 61 2d 67 65 6e 65 72 69 63 00 sof-hda-generic. backtrace (crc 4bf1675c): __kmalloc_node_track_caller_noprof+0x49c/0x6b0 kstrdup+0x46/0xc0 hda_machine_select.cold+0x1de/0x12cf [snd_sof_intel_hda_generic] sof_init_environment+0x16f/0xb50 [snd_sof] sof_probe_continue+0x45/0x7c0 [snd_sof] sof_probe_work+0x1e/0x40 [snd_sof] process_one_work+0x894/0x14b0 worker_thread+0x5e5/0xfb0 kthread+0x39d/0x760 ret_from_fork+0x31/0x70 ret_from_fork_asm+0x1a/0x30
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 28, 2025 | Jul 28, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 31, 2025 | Jul 25, 2025 |
| Suse | — | Upgrade kernel-64kb-develUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatchUpgrade dtb-xilinxUpgrade dtb-appleUpgrade dlm-kmp-rtUpgrade dtb-allwinnerUpgrade dtb-alteraUpgrade dtb-mediatekUpgrade kernel-source-vanillaUpgrade kernel-default-livepatch-develUpgrade dtb-sprdUpgrade kernel-develUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-amdUpgrade kernel-rt-optionalUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-rt-develUpgrade dtb-hisiliconUpgrade kernel-rt-extraUpgrade kernel-rt-livepatchUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade dtb-amazonUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-default-extraUpgrade dtb-armUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-broadcomUpgrade cluster-md-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-symsUpgrade kernel-docs-htmlUpgrade dtb-amlogicUpgrade kernel-docsUpgrade kernel-64kbUpgrade dtb-socionextUpgrade kernel-sourceUpgrade kernel-kvmsmall-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade dtb-apmUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatch-develUpgrade dtb-qcom | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-raspiUpgrade linux-image-realtime-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-awsUpgrade linux-image-gcp-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-realtimeUpgrade linux-image-oracleUpgrade linux-image-oem-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-azureUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-aws-64kUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-generic-64kUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-gcp-6.14 | Jul 31, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub