Null Pointer Dereference in Linux Kernel Audioreach Module by Qualcomm

CVE-2025-40013

What is CVE-2025-40013?

A vulnerability in the Linux kernel's audioreach module can lead to potential null pointer dereference during the topology parsing process. The function audioreach_widget_load_module_common() may return a NULL or error pointer without proper checks, resulting in instability or crashes within the affected systems. This issue has been resolved by implementing necessary NULL checks to prevent dereferencing uninitialized pointers.

References