CVE-2025-38308 Details
Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix possible null-ptr-deref when initing hw Search result of avs_dai_find_path_template() shall be verified before being used. As 'template' is already known when avs_hw_constraints_init() is fired, drop the search entirely.
A vulnerability in the Linux kernel's ASoC Intel AVS component could lead to a null pointer dereference. This issue arises when initializing the hardware search result of the 'avs_dai_find_path_template()' function, which needs to be verified before use. Since the 'template' is already known when the 'avs_hw_constraints_init()' function is called, the search can be eliminated entirely.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/2f78724d4f0c665c83e202e3989d5333a2cb1036 | kernel.org | Patch |
| https://git.kernel.org/stable/c/ea218ae05e60616531fe652650b98dcd3c328279 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.15.1, < 6.15.3 6.15 - 6.15 rc3 6.15 rc4 6.15 rc5 6.15 rc6 6.15 rc7 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Nov 18, 2025 | Initial Analysis | [email protected] |
| Jul 10, 2025 | New CVE Received | kernel.org |