Linux kernel sma1307 Setting_Loaded() Audio Buffer Overflow

The vulnerability of the sma1307 SettingLoaded function in the sound/soc/codecs/sma1307.c module of the Linux kernel’s audio subsystem is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

CVE-2025-39935 ASoC: codec: sma1307: Fix memory corruption in sma1307_setting_loaded()

In the Linux kernel, the following vulnerability has been resolved: ASoC: codec: sma1307: Fix memory corruption in sma1307settingloaded The sma1307-set.headersize is how many integers are in the header there are 8 of them but instead of allocating space of 8 integers we allocate 8 bytes. This lea...

CVE-2025-39935

CVE-2025-39935 affects the Linux kernel ASoC codec sma1307. The vulnerability arises in sma1307_setting_loaded(): sma1307->set.header_size indicates 8 header integers, but the code allocates only 8 bytes instead of 8 integers, causing memory corruption during memcpy(sma1307->set.header, dat...