GHSA-vvjm-j2jq-pjc2HighCVSS 7.8
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd937x: set...
🔗 CVE IDs covered (1)
📋 Description
In the Linux kernel, the following vulnerability has been resolved:
ASoC: codecs: wcd937x: set the comp soundwire port correctly
For some reason we endup with setting soundwire port for HPHL_COMP and HPHR_COMP as zero, this can potentially result in a memory corruption due to accessing and setting -1 th element of port_map array.
🔗 References (5)
- https://nvd.nist.gov/vuln/detail/CVE-2025-40045
- https://git.kernel.org/stable/c/1a1ca38392e7e896075afc8905ddaea525ed30f7
- https://git.kernel.org/stable/c/66a940b1bf48a7095162688332d725ba160154eb
- https://git.kernel.org/stable/c/abcd537aae3b84c6d10ad147e99a204bcb56b234
- https://github.com/advisories/GHSA-vvjm-j2jq-pjc2