Null Pointer Dereference in Linux Kernel Audio Subsystem

CVE-2025-38706

What is CVE-2025-38706?

A vulnerability in the Linux kernel's audio subsystem can lead to a null pointer dereference when the snd_soc_remove_pcm_runtime() function is invoked with a NULL rtd parameter. This scenario may occur if a link is marked as ignored due to a missing hardware component, preventing the creation of a runtime. Consequently, during the removal of the module, the soc_tplg_remove_link() function attempts to call snd_soc_remove_pcm_runtime(), resulting in the potential for unexpected system behavior.

References