NULL Pointer Dereference in Linux Kernel ALSA HDA Driver

CVE-2025-40098

What is CVE-2025-40098?

A vulnerability in the ALSA HDA driver of the Linux kernel can lead to a NULL pointer dereference when the return value from the acpi_evaluate_dsm() function is not adequately checked before dereferencing. This issue arises when acpi_evaluate_object() returns an error status other than ACPI_SUCCESS, potentially causing the system to crash. A workaround has been implemented to add the necessary NULL checks to prevent such failures. This vulnerability was identified by the Linux Verification Center, emphasizing the importance of comprehensive testing and validation for driver stability.

References