Memory Leak in Intel HDA for Linux Kernel

CVE-2025-38438

What is CVE-2025-38438?

A memory leak has been identified in the Intel HDA component of the Linux kernel, caused by improper usage of memory allocation functions. The issue arises when the system allocates memory for tplg_filename using kstrdup(), which can lead to unreferenced memory objects remaining allocated indefinitely. This behavior was detected through kmemleak, revealing that memory allocated can be overwritten without proper reference management. System administrators should ensure their Linux kernel environments are updated to the latest versions to mitigate the risk associated with this vulnerability.

References