Skip to main content
← All vulnerabilities
CVE-2025-40344

ASoC: Intel: avs: Disable periods-elapsed work when closing PCM

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 6.12, 6.12.58, 6.17.8
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Disable periods-elapsed work when closing PCM avs_dai_fe_shutdown() handles the shutdown procedure for HOST HDAudio stream while period-elapsed work services its IRQs. As the former frees the DAI's private context, these two operations shall be synchronized to avoid slab-use-after-free or worse errors.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • Linux Linux

    From 0dbb186c3510cad4e9f443e801bf2e6ab5770c00 · fixed in ca6d2b7aca778afbf8c0c4b330d10cb228c14052; From 0dbb186c3510cad4e9f443e801bf2e6ab5770c00 · fixed in b41fca4aa60be896ba8a81b57aac5dcc6eee66c0; From 0dbb186c3510cad4e9f443e801bf2e6ab5770c00 · fixed in 845f716dc5f354c719f6fda35048b6c2eca99331; From 6.11.9 · fixed in 6.12

  • Linux Linux

    6.12

  • KernelLinux

    From 6.12.0 · fixed in 6.12.58; From 6.13.0 · fixed in 6.17.8

References 3

git.kernel.org