Null Pointer Dereference in Linux Kernel ALSA AD1816A Sound Card Driver
CVE-2025-38454

Currently unrated

Key Information:

Vendor

Linux

Status
Vendor
CVE Published:
25 July 2025

What is CVE-2025-38454?

A vulnerability was discovered in the ALSA AD1816A sound card driver within the Linux kernel, which can lead to a potential null pointer dereference. This issue arises when the 'pdev' object is NULL, which could cause the system to crash or behave unpredictably. The recommended fix involves using pr_warn() instead of dev_warn() to ensure safer error handling, thereby enhancing the robustness of the driver and preventing the crash associated with the NULL pointer dereference.

Affected Version(s)

Linux 20869176d7a7509bad9ea6b895469aebea9c8f21

Linux 20869176d7a7509bad9ea6b895469aebea9c8f21

Linux 20869176d7a7509bad9ea6b895469aebea9c8f21 < 043faef334a1f3d96ae88e1b7618bfa2b4946388

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-38454 : Null Pointer Dereference in Linux Kernel ALSA AD1816A Sound Card Driver