Null Pointer Dereference Flaw in Linux Kernel Affects SOF Audio

CVE-2025-21847

Summary

In the Linux kernel's SOF (Sound Open Firmware) component, a vulnerability arises from the improper handling of null pointers in IPC message data. The issue occurs when the null status of the 'cstream' structure is inadequately verified, leading to potential null pointer dereference if assumed non-null when its corresponding 'stream' is null. This flaw can lead to unpredictable behavior, impacting system security and stability. Developers are advised to update to patched versions that include a thorough check for 'cstream' nullity, as implemented in the recent updates.

References