In the Linux kernel, the following vulnerability has been resolved:
ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak.
sof_pdata->tplg_filename can have address allocated by kstrdup() and can be overwritten. Memory leak was detected with kmemleak:
unreferenced object 0xffff88812391ff60 (size 16): comm "kworker/4:1", pid 161, jiffies 4294802931 hex dump (first 16 bytes): 73 6f 66 2d 68 64 61 2d 67 65 6e 65 72 69 63 00 sof-hda-generic. backtrace (crc 4bf1675c): __kmalloc_node_track_caller_noprof+0x49c/0x6b0 kstrdup+0x46/0xc0 hda_machine_select.cold+0x1de/0x12cf [snd_sof_intel_hda_generic] sof_init_environment+0x16f/0xb50 [snd_sof] sof_probe_continue+0x45/0x7c0 [snd_sof] sof_probe_work+0x1e/0x40 [snd_sof] process_one_work+0x894/0x14b0 worker_thread+0x5e5/0xfb0 kthread+0x39d/0x760 ret_from_fork+0x31/0x70 ret_from_fork_asm+0x1a/0x30
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution existsUpgrade linux | Jul 28, 2025 | Jul 28, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 31, 2025 | Jul 25, 2025 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-docs-htmlUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-apmUpgrade kernel-rtUpgrade dtb-lgUpgrade kernel-zfcpdumpUpgrade dtb-qcomUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-marvellUpgrade kernel-docsUpgrade dtb-amazonUpgrade dtb-exynosUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade dtb-armUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade dtb-socionextUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade dtb-amdUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade dlm-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-default-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-64kb-develUpgrade dtb-appleUpgrade dtb-nvidiaUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade dtb-sprdUpgrade dtb-mediatekUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-alteraUpgrade kernel-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-xilinxUpgrade dtb-allwinnerUpgrade kernel-64kb-optionalUpgrade kernel-obs-buildUpgrade dlm-kmp-rt | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-generic-64k-6.14Upgrade linux-image-awsUpgrade linux-image-realtimeUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oracleUpgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-azure-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-raspi-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-generic-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-aws-64kUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-gcp-6.14Upgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1020-gcp-64k | Jul 31, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub