CVE-2025-38307
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-38307
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38307.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-38307
- Downstream
- Related
- Published
- 2025-07-10T07:42:17Z
- Modified
- 2025-10-15T15:36:15.710681Z
- Summary
- ASoC: Intel: avs: Verify content returned by parse_int_array()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
ASoC: Intel: avs: Verify content returned by parseintarray()
The first element of the returned array stores its length. If it is 0, any manipulation beyond the element at index 0 ends with null-ptr-deref.
- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/18ff538aac63de1866e5a49d57e22788b5c21d12
- https://git.kernel.org/stable/c/2916794ffbce604cc2cda105f6b8a4a7c748dd7f
- https://git.kernel.org/stable/c/93e246b6769bdacb09cfff4ea0f00fe5ab4f0d7a
- https://git.kernel.org/stable/c/cc03c899e6d9812b25c3754c9a95c3830c4aec26
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced5a565ba23abe478f3d4c3b0c8798bcb5215b82f5Fixedcc03c899e6d9812b25c3754c9a95c3830c4aec26
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced5a565ba23abe478f3d4c3b0c8798bcb5215b82f5Fixed18ff538aac63de1866e5a49d57e22788b5c21d12
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced5a565ba23abe478f3d4c3b0c8798bcb5215b82f5Fixed2916794ffbce604cc2cda105f6b8a4a7c748dd7f
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced5a565ba23abe478f3d4c3b0c8798bcb5215b82f5Fixed93e246b6769bdacb09cfff4ea0f00fe5ab4f0d7a
Affected versions
v6.*
v6.1
v6.1-rc7
v6.1-rc8
v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.12
v6.12-rc1
v6.12-rc2
v6.12-rc3
v6.12-rc4
v6.12-rc5
v6.12-rc6
v6.12-rc7
v6.12.1
v6.12.10
v6.12.11
v6.12.12
v6.12.13
v6.12.14
v6.12.15
v6.12.16
v6.12.17
v6.12.18
v6.12.19
v6.12.2
v6.12.20
v6.12.21
v6.12.22
v6.12.23
v6.12.24
v6.12.25
v6.12.26
v6.12.27
v6.12.28
v6.12.29
v6.12.3
v6.12.30
v6.12.31
v6.12.32
v6.12.33
v6.12.4
v6.12.5
v6.12.6
v6.12.7
v6.12.8
v6.12.9
v6.13
v6.13-rc1
v6.13-rc2
v6.13-rc3
v6.13-rc4
v6.13-rc5
v6.13-rc6
v6.13-rc7
v6.14
v6.14-rc1
v6.14-rc2
v6.14-rc3
v6.14-rc4
v6.14-rc5
v6.14-rc6
v6.14-rc7
v6.15
v6.15-rc1
v6.15-rc2
v6.15-rc3
v6.15-rc4
v6.15-rc5
v6.15-rc6
v6.15-rc7
v6.15.1
v6.15.2
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.3
v6.6.30
v6.6.31
v6.6.32
v6.6.33
v6.6.34
v6.6.35
v6.6.36
v6.6.37
v6.6.38
v6.6.39
v6.6.4
v6.6.40
v6.6.41
v6.6.42
v6.6.43
v6.6.44
v6.6.45
v6.6.46
v6.6.47
v6.6.48
v6.6.49
v6.6.5
v6.6.50
v6.6.51
v6.6.52
v6.6.53
v6.6.54
v6.6.55
v6.6.56
v6.6.57
v6.6.58
v6.6.59
v6.6.6
v6.6.60
v6.6.61
v6.6.62
v6.6.63
v6.6.64
v6.6.65
v6.6.66
v6.6.67
v6.6.68
v6.6.69
v6.6.7
v6.6.70
v6.6.71
v6.6.72
v6.6.73
v6.6.74
v6.6.75
v6.6.76
v6.6.77
v6.6.78
v6.6.79
v6.6.8
v6.6.80
v6.6.81
v6.6.82
v6.6.83
v6.6.84
v6.6.85
v6.6.86
v6.6.87
v6.6.88
v6.6.89
v6.6.9
v6.6.90
v6.6.91
v6.6.92
v6.6.93
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7
Database specific
vanir_signatures
[
{
"id": "CVE-2025-38307-071a73e3",
"signature_type": "Function",
"digest": {
"length": 549.0,
"function_hash": "112978844208986876096168929568698809266"
},
"target": {
"file": "sound/soc/intel/avs/debugfs.c",
"function": "trace_control_write"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18ff538aac63de1866e5a49d57e22788b5c21d12",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-38307-0f5d61c4",
"signature_type": "Line",
"digest": {
"line_hashes": [
"286548733405363535297353228349803980569",
"248470209331121607478508964606452117634",
"38485493409141848564345575521658427977",
"252472111840109059526140049946095317365"
],
"threshold": 0.9
},
"target": {
"file": "sound/soc/intel/avs/debugfs.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@18ff538aac63de1866e5a49d57e22788b5c21d12",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-38307-2bad1710",
"signature_type": "Function",
"digest": {
"length": 549.0,
"function_hash": "112978844208986876096168929568698809266"
},
"target": {
"file": "sound/soc/intel/avs/debugfs.c",
"function": "trace_control_write"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@93e246b6769bdacb09cfff4ea0f00fe5ab4f0d7a",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-38307-602d6b1d",
"signature_type": "Line",
"digest": {
"line_hashes": [
"286548733405363535297353228349803980569",
"248470209331121607478508964606452117634",
"38485493409141848564345575521658427977",
"252472111840109059526140049946095317365"
],
"threshold": 0.9
},
"target": {
"file": "sound/soc/intel/avs/debugfs.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@93e246b6769bdacb09cfff4ea0f00fe5ab4f0d7a",
"signature_version": "v1",
"deprecated": false
}
]