In the Linux kernel, the following vulnerability has been resolved:
ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak.
sof_pdata->tplg_filename can have address allocated by kstrdup() and can be overwritten. Memory leak was detected with kmemleak:
unreferenced object 0xffff88812391ff60 (size 16): comm "kworker/4:1", pid 161, jiffies 4294802931 hex dump (first 16 bytes): 73 6f 66 2d 68 64 61 2d 67 65 6e 65 72 69 63 00 sof-hda-generic. backtrace (crc 4bf1675c): __kmalloc_node_track_caller_noprof+0x49c/0x6b0 kstrdup+0x46/0xc0 hda_machine_select.cold+0x1de/0x12cf [snd_sof_intel_hda_generic] sof_init_environment+0x16f/0xb50 [snd_sof] sof_probe_continue+0x45/0x7c0 [snd_sof] sof_probe_work+0x1e/0x40 [snd_sof] process_one_work+0x894/0x14b0 worker_thread+0x5e5/0xfb0 kthread+0x39d/0x760 ret_from_fork+0x31/0x70 ret_from_fork_asm+0x1a/0x30
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 28, 2025 | Jul 28, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 31, 2025 | Jul 25, 2025 |
| Suse | — | Upgrade kernel-rt-vdsoUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-marvellUpgrade kernel-obs-qaUpgrade kernel-64kbUpgrade kernel-macrosUpgrade dtb-broadcomUpgrade ocfs2-kmp-rtUpgrade dtb-amazonUpgrade dtb-exynosUpgrade dtb-freescaleUpgrade kernel-docsUpgrade dtb-apmUpgrade dtb-lgUpgrade kernel-kvmsmall-vdsoUpgrade dtb-qcomUpgrade kernel-rt-livepatch-develUpgrade kernel-default-develUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade dtb-armUpgrade kernel-sourceUpgrade kernel-symsUpgrade dlm-kmp-defaultUpgrade kernel-zfcpdumpUpgrade dtb-rockchipUpgrade dtb-amlogicUpgrade dtb-socionextUpgrade kernel-docs-htmlUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-rtUpgrade kernel-default-optionalUpgrade dtb-nvidiaUpgrade dtb-hisiliconUpgrade kernel-default-livepatchUpgrade dtb-xilinxUpgrade kernel-defaultUpgrade dtb-amdUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-rt-develUpgrade kernel-64kb-optionalUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-64kbUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade dtb-appleUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade dtb-mediatekUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatchUpgrade kernel-rt-extraUpgrade kernel-develUpgrade cluster-md-kmp-rt | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-generic-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-oem-24.04aUpgrade linux-image-aws-64kUpgrade linux-image-virtualUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-gcpUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-genericUpgrade linux-image-gcp-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-oem-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-awsUpgrade linux-image-realtimeUpgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-gcp-64kUpgrade linux-image-oracleUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-raspiUpgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1017-aws-64k | Jul 31, 2025 | Jul 25, 2025 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub