Memory Corruption in Linux Kernel Affecting ALSA Audio Interfaces

CVE-2025-39696

What is CVE-2025-39696?

A vulnerability in the ALSA (Advanced Linux Sound Architecture) subsystem of the Linux kernel allows for potential memory corruption due to an incorrect reference to the tasdevice_priv pointer. During efforts to unify calibration data management, the memory reference was mistakenly assigned to h->hda_priv instead of h->priv. This misconfiguration may result in system instability, including crashes, as the compiler is unable to detect the void pointer's context and validity. It is crucial for users to ensure they are running patched versions of the Linux kernel to mitigate these risks.

References