CVE-2025-37793
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2025-05-01
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe() devm_kasprintf() returns NULL when memory allocation fails. Currently, avs_component_probe() does not check for this case, which results in a NULL pointer dereference.
Weakness Classification (1)
Affected Software (8)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 739c031110da9ba966b0189fa25a2a1c0d42263c < aaa93b8846101461de815759d39979661b82d5a5 |
| Linux | Linux | 739c031110da9ba966b0189fa25a2a1c0d42263c < 23fde311ea1d0a6c36bf92ce48b90b77d0ece1a4 |
| Linux | Linux | 739c031110da9ba966b0189fa25a2a1c0d42263c < c2825073271b6f15e669a424b363612082494863 |
| Linux | Linux | 739c031110da9ba966b0189fa25a2a1c0d42263c < 95f723cf141b95e3b3a5b92cf2ea98a863fe7275 |
| Linux | Linux | 6.6 |
| linux | linux_kernel | 6.6 – 6.6.88 |
| linux | linux_kernel | 6.15 |
| linux | linux_kernel | 6.15 |