CVE-2025-37919

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-05-20 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp: Fix NULL pointer deref in acp_i2s_set_tdm_slot Update chip data using dev_get_drvdata(dev->parent) to fix NULL pointer deref in acp_i2s_set_tdm_slot.

Weakness Classification (1)

Affected Software (9)

VendorProductVersion
Linux Linux cd60dec8994cf0626faf80a67be9350ae335f7e9 < 3104b7d559ffb28f34e55028ff55a475e26e2e1e
Linux Linux cd60dec8994cf0626faf80a67be9350ae335f7e9 < fd4d8d139030dd2de97ef46d332673675ca8ad72
Linux Linux cd60dec8994cf0626faf80a67be9350ae335f7e9 < 6d9b64156d849e358cb49b6b899fb0b7d262bda8
Linux Linux 6.12
linux linux_kernel 6.12 – 6.12.28
linux linux_kernel 6.15
linux linux_kernel 6.15
linux linux_kernel 6.15
linux linux_kernel 6.15

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.20%
Raw Score 0.002010
Percentile 10.0%
Date 2026-11-06

EPSS Trend

2026-11-06
0.00201
2026-11-05
0.00201

Intelligence Sources

mitre ref →
nvd ref →