Linux Kernel Vulnerability in Intel ASoC Audio Driver

CVE-2025-40344

What is CVE-2025-40344?

A vulnerability exists in the Linux kernel's handling of the ASoC Intel audio driver, specifically within the avs_dai_fe_shutdown() function. This issue arises during the shutdown process of the HOST HDAudio stream, as the function attempts to free the DAI's private context without properly synchronizing the period-elapsed work that services its IRQs. The lack of synchronization may lead to slab-use-after-free errors, potentially causing system instability or crashes.

References