Use-After-Free Vulnerability in Intel ASoC Components in Linux Kernel
CVE-2025-40338

Currently unrated

Key Information:

Vendor: Linux
Status: Linux
Vendor: CVE Published:; 9 December 2025

What is CVE-2025-40338?

A vulnerability in the Linux kernel's ASoC (ALSA System on Chip) subsystem allows components to share a name pointer directly, leading to potential use-after-free errors during component teardown. To mitigate this issue, the name should be duplicated to prevent sharing, which can cause unexpected behavior or crashes in the kernel. The vulnerability highlights the importance of careful management of memory and component initialization in the kernel.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch