In the Linux kernel, the following vulnerability has been resolved:
ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak.
sof_pdata->tplg_filename can have address allocated by kstrdup() and can be overwritten. Memory leak was detected with kmemleak:
unreferenced object 0xffff88812391ff60 (size 16): comm "kworker/4:1", pid 161, jiffies 4294802931 hex dump (first 16 bytes): 73 6f 66 2d 68 64 61 2d 67 65 6e 65 72 69 63 00 sof-hda-generic. backtrace (crc 4bf1675c): __kmalloc_node_track_caller_noprof+0x49c/0x6b0 kstrdup+0x46/0xc0 hda_machine_select.cold+0x1de/0x12cf [snd_sof_intel_hda_generic] sof_init_environment+0x16f/0xb50 [snd_sof] sof_probe_continue+0x45/0x7c0 [snd_sof] sof_probe_work+0x1e/0x40 [snd_sof] process_one_work+0x894/0x14b0 worker_thread+0x5e5/0xfb0 kthread+0x39d/0x760 ret_from_fork+0x31/0x70 ret_from_fork_asm+0x1a/0x30
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution existsUpgrade linux | Jul 28, 2025 | Jul 28, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 31, 2025 | Jul 25, 2025 |
| Suse | — | Upgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade kernel-docs-htmlUpgrade kernel-rt-vdsoUpgrade dtb-lgUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade dtb-marvellUpgrade kernel-rt-livepatch-develUpgrade kernel-symsUpgrade dtb-armUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade ocfs2-kmp-rtUpgrade dtb-amazonUpgrade kernel-rtUpgrade dtb-exynosUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade dtb-socionextUpgrade kselftests-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-develUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade kernel-default-optionalUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-mediatekUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-default-livepatch-develUpgrade kernel-source-vanillaUpgrade dtb-xilinxUpgrade kernel-default-livepatchUpgrade dtb-hisiliconUpgrade cluster-md-kmp-rtUpgrade dtb-nvidiaUpgrade dlm-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-64kb-optionalUpgrade kernel-defaultUpgrade dtb-amdUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade dtb-appleUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade dtb-sprdUpgrade kernel-rt-extraUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade dtb-cavium | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-6.14Upgrade linux-image-azureUpgrade linux-image-oracle-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-64kUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-virtualUpgrade linux-image-aws-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-gcpUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-realtime-6.14Upgrade linux-image-raspiUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-oem-6.14Upgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-azure-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-realtimeUpgrade linux-image-oracle-6.14 | Jul 31, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub