CVE-2025-37941

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2025-37941
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-37941.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-37941
Downstream
Published
2025-05-20T15:58:18.275Z
Modified
2025-11-16T17:24:43.504082Z
Summary
ASoC: codecs: wcd937x: fix a potential memory leak in wcd937x_soc_codec_probe()
Details

In the Linux kernel, the following vulnerability has been resolved:

ASoC: codecs: wcd937x: fix a potential memory leak in wcd937xsoccodec_probe()

When sndsocdapmnewcontrols() or sndsocdapmaddroutes() fails, wcd937xsoccodecprobe() returns without releasing 'wcd937x->clshinfo', which is allocated by wcdclshctrlalloc. Add wcdclshctrlfree() to prevent potential memory leak.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
313e978df7fc38b9e949ac5933d0d9d56d5e8a9c
Fixed
acadb2e2b3c5b9977a843a3a94fece9bdcf6aea1
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
313e978df7fc38b9e949ac5933d0d9d56d5e8a9c
Fixed
b573e04116fd33b9143fa276bbab2f0afad0a1ae
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
313e978df7fc38b9e949ac5933d0d9d56d5e8a9c
Fixed
aafb5325aca3e806b3ea3707402189263473d257
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
313e978df7fc38b9e949ac5933d0d9d56d5e8a9c
Fixed
3e330acf4efd63876d673c046cd073a1d4ed57a8

Affected versions

v6.*

v6.10
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.12
v6.12-rc1
v6.12-rc2
v6.12-rc3
v6.12-rc4
v6.12-rc5
v6.12-rc6
v6.12-rc7
v6.12.1
v6.12.10
v6.12.11
v6.12.12
v6.12.13
v6.12.14
v6.12.15
v6.12.16
v6.12.17
v6.12.18
v6.12.19
v6.12.2
v6.12.20
v6.12.21
v6.12.22
v6.12.23
v6.12.3
v6.12.4
v6.12.5
v6.12.6
v6.12.7
v6.12.8
v6.12.9
v6.13
v6.13-rc1
v6.13-rc2
v6.13-rc3
v6.13-rc4
v6.13-rc5
v6.13-rc6
v6.13-rc7
v6.13.1
v6.13.10
v6.13.11
v6.13.2
v6.13.3
v6.13.4
v6.13.5
v6.13.6
v6.13.7
v6.13.8
v6.13.9
v6.14
v6.14-rc1
v6.14-rc2
v6.14-rc3
v6.14-rc4
v6.14-rc5
v6.14-rc6
v6.14-rc7
v6.14.1
v6.14.2

Database specific

vanir_signatures

[
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b573e04116fd33b9143fa276bbab2f0afad0a1ae",
        "signature_version": "v1",
        "signature_type": "Line",
        "target": {
            "file": "sound/soc/codecs/wcd937x.c"
        },
        "id": "CVE-2025-37941-2b693dbe",
        "digest": {
            "line_hashes": [
                "202444921487342822091270239315397560069",
                "22936978024689033656755352455958504054",
                "111307192977389072819994141088437022233",
                "183270898359684183505514930622807479097",
                "38063281795584261927607384533753254273",
                "89680593285408346510849654551365368833",
                "141636529331071643770251595939248990429",
                "336308802710601320765508449779611461354"
            ],
            "threshold": 0.9
        },
        "deprecated": false
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aafb5325aca3e806b3ea3707402189263473d257",
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "function": "wcd937x_soc_codec_probe",
            "file": "sound/soc/codecs/wcd937x.c"
        },
        "id": "CVE-2025-37941-46ae54b5",
        "digest": {
            "length": 2595.0,
            "function_hash": "263931715108470149245352444589044423426"
        },
        "deprecated": false
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aafb5325aca3e806b3ea3707402189263473d257",
        "signature_version": "v1",
        "signature_type": "Line",
        "target": {
            "file": "sound/soc/codecs/wcd937x.c"
        },
        "id": "CVE-2025-37941-51716fb3",
        "digest": {
            "line_hashes": [
                "202444921487342822091270239315397560069",
                "22936978024689033656755352455958504054",
                "111307192977389072819994141088437022233",
                "183270898359684183505514930622807479097",
                "38063281795584261927607384533753254273",
                "89680593285408346510849654551365368833",
                "141636529331071643770251595939248990429",
                "336308802710601320765508449779611461354"
            ],
            "threshold": 0.9
        },
        "deprecated": false
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b573e04116fd33b9143fa276bbab2f0afad0a1ae",
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "function": "wcd937x_soc_codec_probe",
            "file": "sound/soc/codecs/wcd937x.c"
        },
        "id": "CVE-2025-37941-790f7a8f",
        "digest": {
            "length": 2595.0,
            "function_hash": "263931715108470149245352444589044423426"
        },
        "deprecated": false
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3e330acf4efd63876d673c046cd073a1d4ed57a8",
        "signature_version": "v1",
        "signature_type": "Line",
        "target": {
            "file": "sound/soc/codecs/wcd937x.c"
        },
        "id": "CVE-2025-37941-b54b7094",
        "digest": {
            "line_hashes": [
                "202444921487342822091270239315397560069",
                "22936978024689033656755352455958504054",
                "111307192977389072819994141088437022233",
                "183270898359684183505514930622807479097",
                "38063281795584261927607384533753254273",
                "89680593285408346510849654551365368833",
                "141636529331071643770251595939248990429",
                "336308802710601320765508449779611461354"
            ],
            "threshold": 0.9
        },
        "deprecated": false
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@acadb2e2b3c5b9977a843a3a94fece9bdcf6aea1",
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "function": "wcd937x_soc_codec_probe",
            "file": "sound/soc/codecs/wcd937x.c"
        },
        "id": "CVE-2025-37941-bfccf978",
        "digest": {
            "length": 2595.0,
            "function_hash": "263931715108470149245352444589044423426"
        },
        "deprecated": false
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3e330acf4efd63876d673c046cd073a1d4ed57a8",
        "signature_version": "v1",
        "signature_type": "Function",
        "target": {
            "function": "wcd937x_soc_codec_probe",
            "file": "sound/soc/codecs/wcd937x.c"
        },
        "id": "CVE-2025-37941-d050206f",
        "digest": {
            "length": 2595.0,
            "function_hash": "263931715108470149245352444589044423426"
        },
        "deprecated": false
    },
    {
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@acadb2e2b3c5b9977a843a3a94fece9bdcf6aea1",
        "signature_version": "v1",
        "signature_type": "Line",
        "target": {
            "file": "sound/soc/codecs/wcd937x.c"
        },
        "id": "CVE-2025-37941-e9d46782",
        "digest": {
            "line_hashes": [
                "202444921487342822091270239315397560069",
                "22936978024689033656755352455958504054",
                "111307192977389072819994141088437022233",
                "183270898359684183505514930622807479097",
                "38063281795584261927607384533753254273",
                "89680593285408346510849654551365368833",
                "141636529331071643770251595939248990429",
                "336308802710601320765508449779611461354"
            ],
            "threshold": 0.9
        },
        "deprecated": false
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.11.0
Fixed
6.12.24
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.13.12
Type
ECOSYSTEM
Events
Introduced
6.14.0
Fixed
6.14.3