NULL Pointer Vulnerability in Linux Kernel Affecting Audio Components

CVE-2025-39892

What is CVE-2025-39892?

A vulnerability exists in the Audio Subsystem of the Linux kernel due to a NULL pointer dereference when handling driver names. The issue occurs in the soc-generic-dmaengine-pcm.c file when the CPU and platform share the same device, leading to a potential crash during the driver probe process. If the CPU component driver lacks a proper driver name, it may trigger a NULL pointer access, causing system instability. This flaw can impact multiple kernel versions and underscores the necessity for regular updates to mitigate potential security risks.

References