Linux Kernel Vulnerability in ALSA SoC Simple Card Utilities by Vendor

CVE-2025-39930

Summary

A vulnerability has been detected in the ALSA SoC Simple Card Utilities within the Linux kernel. The issue arises from improper handling of device nodes during the parsing process in graph_util_parse_dai(). The original implementation erroneously utilized __free(device_node), which could lead to unintended memory management issues while the driver is actively in use. This oversight can affect the stability and reliability of the audio subsystem, necessitating immediate attention to ensure proper device node management and memory allocation procedures are followed.

References