In the Linux kernel, the following vulnerability has been resolved:
ASoC: core: Check for rtd == NULL in sndsocremovepcmruntime()
sndsocremovepcmruntime() might be called with rtd == NULL which will leads to null pointer dereference. This was reproduced with topology loading and marking a link as ignore due to missing hardware component on the system. On module removal the soctplgremovelink() would call sndsocremovepcm_runtime() with rtd == NULL since the link was ignored, no runtime was created.
[
{
"id": "CVE-2025-38706-0bb567de",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "snd_soc_remove_pcm_runtime",
"file": "sound/soc/soc-core.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@82ba7b8cf9f6e3bf392a9f08ba3d1c0b200ccb94",
"digest": {
"length": 165.0,
"function_hash": "279476259830044179043610819270029277821"
}
},
{
"id": "CVE-2025-38706-2db01bbb",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "snd_soc_remove_pcm_runtime",
"file": "sound/soc/soc-core.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7ce0a7255ce97ed7c54afae83fdbce712a1f0c9e",
"digest": {
"length": 144.0,
"function_hash": "218518530926398989584198670032618048747"
}
},
{
"id": "CVE-2025-38706-3bb041f9",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "sound/soc/soc-core.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@41f53afe53a57a7c50323f99424b598190acf192",
"digest": {
"line_hashes": [
"117265912744269376377638319182067950043",
"2574081249287760878591756458598899196",
"258761967546804191895298858797325286615",
"19678213692048009564902531631045656518"
],
"threshold": 0.9
}
},
{
"id": "CVE-2025-38706-60f55542",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "snd_soc_remove_pcm_runtime",
"file": "sound/soc/soc-core.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cecc65827ef3df9754e097582d89569139e6cd1e",
"digest": {
"length": 144.0,
"function_hash": "218518530926398989584198670032618048747"
}
},
{
"id": "CVE-2025-38706-67080893",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "sound/soc/soc-core.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@82ba7b8cf9f6e3bf392a9f08ba3d1c0b200ccb94",
"digest": {
"line_hashes": [
"117265912744269376377638319182067950043",
"2574081249287760878591756458598899196",
"289994028464536759013607328178318012801",
"288236897962647075503914458498590540523"
],
"threshold": 0.9
}
},
{
"id": "CVE-2025-38706-71def214",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "snd_soc_remove_pcm_runtime",
"file": "sound/soc/soc-core.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2fce20decc6a83f16dd73744150c4e7ea6c97c21",
"digest": {
"length": 144.0,
"function_hash": "218518530926398989584198670032618048747"
}
},
{
"id": "CVE-2025-38706-95e95745",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "snd_soc_remove_pcm_runtime",
"file": "sound/soc/soc-core.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@41f53afe53a57a7c50323f99424b598190acf192",
"digest": {
"length": 144.0,
"function_hash": "218518530926398989584198670032618048747"
}
},
{
"id": "CVE-2025-38706-a1d1dc51",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "snd_soc_remove_pcm_runtime",
"file": "sound/soc/soc-core.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8b465bedc2b417fd27c1d1ab7122882b4b60b1a0",
"digest": {
"length": 165.0,
"function_hash": "279476259830044179043610819270029277821"
}
},
{
"id": "CVE-2025-38706-b34c8444",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "sound/soc/soc-core.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8b465bedc2b417fd27c1d1ab7122882b4b60b1a0",
"digest": {
"line_hashes": [
"117265912744269376377638319182067950043",
"2574081249287760878591756458598899196",
"289994028464536759013607328178318012801",
"288236897962647075503914458498590540523"
],
"threshold": 0.9
}
},
{
"id": "CVE-2025-38706-c3425d99",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "sound/soc/soc-core.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2fce20decc6a83f16dd73744150c4e7ea6c97c21",
"digest": {
"line_hashes": [
"117265912744269376377638319182067950043",
"2574081249287760878591756458598899196",
"258761967546804191895298858797325286615",
"19678213692048009564902531631045656518"
],
"threshold": 0.9
}
},
{
"id": "CVE-2025-38706-c441ad7d",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "sound/soc/soc-core.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cecc65827ef3df9754e097582d89569139e6cd1e",
"digest": {
"line_hashes": [
"117265912744269376377638319182067950043",
"2574081249287760878591756458598899196",
"258761967546804191895298858797325286615",
"19678213692048009564902531631045656518"
],
"threshold": 0.9
}
},
{
"id": "CVE-2025-38706-da148d9f",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "snd_soc_remove_pcm_runtime",
"file": "sound/soc/soc-core.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2d91cb261cac6d885954b8f5da28b5c176c18131",
"digest": {
"length": 144.0,
"function_hash": "218518530926398989584198670032618048747"
}
},
{
"id": "CVE-2025-38706-f5b4978f",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "sound/soc/soc-core.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2d91cb261cac6d885954b8f5da28b5c176c18131",
"digest": {
"line_hashes": [
"117265912744269376377638319182067950043",
"2574081249287760878591756458598899196",
"258761967546804191895298858797325286615",
"19678213692048009564902531631045656518"
],
"threshold": 0.9
}
},
{
"id": "CVE-2025-38706-fd53111a",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "sound/soc/soc-core.c"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7ce0a7255ce97ed7c54afae83fdbce712a1f0c9e",
"digest": {
"line_hashes": [
"117265912744269376377638319182067950043",
"2574081249287760878591756458598899196",
"258761967546804191895298858797325286615",
"19678213692048009564902531631045656518"
],
"threshold": 0.9
}
}
]