Use-After-Free Vulnerability in Intel HDA Component of Linux Kernel

CVE-2025-38056

What is CVE-2025-38056?

A use-after-free vulnerability exists in the Intel HDA component of the Linux kernel. When the module is unloaded, a global variable is left pointing to freed memory. This issue arises during the module's reload process. The erroneous memory access can lead to unpredictable behavior, potentially exposing the system to various exploits. The flaw is addressed by ensuring that the match array is duplicated before any modifications occur, mitigating the risk of accessing invalid memory.

References