Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback In create_sdw_dailink() check that sof_end->codec_info->add_sidecar is not NULL before calling it. The original code assumed that if include_sidecar is true, the codec on that link has an add_sidecar callback. But there could be other codecs on the same link that do not have an add_sidecar callback.

INFO

Published Date :

2025-11-12T10:23:22.195Z

Last Modified :

2025-12-01T06:18:38.454Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2025-40132 vulnerability.

Vendors Products
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-40132.

URL Resource
https://git.kernel.org/stable/c/87cab86925b7fa4c1c977bc191ac549a3b23f0ea cve-icon cve-icon
https://git.kernel.org/stable/c/a5416c0fc9e77b69f853dfb1e78bc05a7c06a789 cve-icon cve-icon
https://git.kernel.org/stable/c/aea038062edfca9c6e5ddcecd4611d5a80113b4e cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025111254-CVE-2025-40132-9d00@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-40132 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-40132 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact