← CVE Intelligence

CVE-2025-38307

ASoC: Intel: avs: Verify content returned by parse_int_array() PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Verify content returned by parse_int_array() The first element of the returned array stores its length. If it is 0, any manipulation beyond the element at index 0 ends with null-ptr-deref.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 5a565ba23abe478f3d4c3b0c8798bcb5215b82f5 before cc03c899e6d9812b25c3754c9a95c3830c4aec26; affected 5a565ba23abe478f3d4c3b0c8798bcb5215b82f5 before 18ff538aac63de1866e5a49d57e22788b5c21d12; affected 5a565ba23abe478f3d4c3b0c8798bcb5215b82f5 before 2916794ffbce604cc2cda105f6b8a4a7c748dd7f; affected 5a565ba23abe478f3d4c3b0c8798bcb5215b82f5 before 93e246b6769bdacb09cfff4ea0f00fe5ab4f0d7a
Linux / Linuxaffected 6.2; unaffected 0 before 6.2; unaffected 6.6.94 through 6.6.*; unaffected 6.12.34 through 6.12.*; unaffected 6.15.3 through 6.15.*; unaffected 6.16 through *

CWE

No CWE identifiers supplied.

References