Null Pointer Dereference in Linux Kernel Audio Subsystem
CVE-2025-38706

Currently unrated

Key Information:

Vendor: Linux
Status: Linux
Vendor: CVE Published:; 4 September 2025

What is CVE-2025-38706?

A vulnerability in the Linux kernel's audio subsystem can lead to a null pointer dereference when the snd_soc_remove_pcm_runtime() function is invoked with a NULL rtd parameter. This scenario may occur if a link is marked as ignored due to a missing hardware component, preventing the creation of a runtime. Consequently, during the removal of the module, the soc_tplg_remove_link() function attempts to call snd_soc_remove_pcm_runtime(), resulting in the potential for unexpected system behavior.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch