409 matches found
CVE-2025-55099
CVE-2025-55099 concerns Eclipse ThreadX USBX prior to 6.4.3, where the USB support module has a potential out-of-bounds read in _ux_host_class_audio_alternate_setting_locate() when parsing a descriptor with attacker-controlled frequency fields. Red Hat and multiple sources reiterate this exact is...
EUVD-2025-33324
In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp: Fix incorrect retrival of acpchipinfo Use devgetdrvdatadev-parent instead of devgetplatdatadev to correctly obtain acpchipinfo members in the acp I2S driver. Previously, some members were not updated properly due ...
CVE-2025-39959
CVE-2025-39959 is resolved in the Linux kernel ASoC/amd ACP code. The vulnerability stemmed from incorrect retrieval of acp_chip_info in the acp I2S driver, where some members could be stale due to using dev_get_platdata instead of dev_get_drvdata. The fix ensures all acp_chip_info members are re...
CVE-2023-53666
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd938x: fix missing mbhc init error handling MBHC initialisation can fail so add the missing error handling to avoid dereferencing an error pointer when later configuring the jack: Unable to handle kernel paging...
UBUNTU-CVE-2023-53640
In the Linux kernel, the following vulnerability has been resolved: ASoC: lpass: Fix for KASAN useafterfree out of bounds When we run syzkaller we get below Out of Bounds error. "KASAN: slab-out-of-bounds Read in regcacheflatread" Below is the backtrace of the issue: BUG: KASAN: slab-out-of-bound...
UBUNTU-CVE-2023-53666
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd938x: fix missing mbhc init error handling MBHC initialisation can fail so add the missing error handling to avoid dereferencing an error pointer when later configuring the jack: Unable to handle kernel paging...
CVE-2023-53648 ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer
In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: Fix possible NULL dereference in sndac97mixer smatch error: sound/pci/ac97/ac97codec.c:2354 sndac97mixer error: we previously assumed 'rac97' could be null see line 2072 remove redundant assignment, return error if...
CVE-2023-53640
In the Linux kernel, the following vulnerability has been resolved: ASoC: lpass: Fix for KASAN useafterfree out of bounds When we run syzkaller we get below Out of Bounds error. "KASAN: slab-out-of-bounds Read in regcacheflatread" Below is the backtrace of the issue: BUG: KASAN: slab-out-of-bound...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986329)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986329 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-pcm: Add NULL check in BE reparenting Add NULL check in dpcmbereparent API, to handle...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986879)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986879 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Fix bounds check for sx controls For sx controls the semantics of the max field is not...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986345)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986345 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Fix bounds check for sx controls For sx controls the semantics of the max field is not...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986756)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986756 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-pcm: Add NULL check in BE reparenting Add NULL check in dpcmbereparent API, to handle...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986432)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986432 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Fix bounds check for sx controls For sx controls the semantics of the max field is not...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986776)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986776 advisory. In the Linux kernel, the following vulnerability has been resolved: ASoC: max9759: fix underflow in speakergaincontrolput Check for negative values of priv-gain to...
SUSE CVE-2025-39938
In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed If earlier opening of source graph fails e.g. ADSP rejects due to incorrect audioreach topology, the graph is closed and "daidata-graphdai-id" is...
EUVD-2025-32397
In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed If earlier opening of source graph fails e.g. ADSP rejects due to incorrect audioreach topology, the graph is closed and "daidata-graphdai-id" is...
CVE-2025-39938
The CVE-2025-39938 issue is a NULL pointer dereference in ASoC/qcom: q6apm-lpass-dais when the source graph fails (e.g., ADSP/topology rejection). The bug can cause a crash during snd_soc_pcm_dai_prepare due to dai_data->graph[dai->id] being NULL. The Linux kernel has been updated to fix th...
EUVD-2025-14101
Malicious code in bioql PyPI...