Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2025-40317 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

In the Linux kernel, the following vulnerability has been resolved: regmap: slimbus: fix bus_context pointer in regmap init calls Commit 4e65bda8273c ("ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data()") revealed the problem in the slimbus regmap. That commit breaks audio playback, for instance, on sdm845 Thundercomm Dragonboard 845c board: Unable to handle kernel paging request at virtual address ffff8000847cbad4 ... CPU: 5 UID: 0 PID: 776 Comm: aplay Not tainted 6.18.0-rc1-00028-g7ea30958b305 #11 PREEMPT Hardware name: Thundercomm Dragonboard 845c (DT) ... Call trace: slim_xfer_msg+0x24/0x1ac [slimbus] (P) slim_read+0x48/0x74 [slimbus] regmap_slimbus_read+0x18/0x24 [regmap_slimbus] _regmap_raw_read+0xe8/0x174 _regmap_bus_read+0x44/0x80 _regmap_read+0x60/0xd8 _regmap_update_bits+0xf4/0x140 _regmap_select_page+0xa8/0x124 _regmap_raw_write_impl+0x3b8/0x65c _regmap_bus_raw_write+0x60/0x80 _regmap_write+0x58/0xc0 regmap_write+0x4c/0x80 wcd934x_hw_params+0x494/0x8b8 [snd_soc_wcd934x] snd_soc_dai_hw_params+0x3c/0x7c [snd_soc_core] __soc_pcm_hw_params+0x22c/0x634 [snd_soc_core] dpcm_be_dai_hw_params+0x1d4/0x38c [snd_soc_core] dpcm_fe_dai_hw_params+0x9c/0x17c [snd_soc_core] snd_pcm_hw_params+0x124/0x464 [snd_pcm] snd_pcm_common_ioctl+0x110c/0x1820 [snd_pcm] snd_pcm_ioctl+0x34/0x4c [snd_pcm] __arm64_sys_ioctl+0xac/0x104 invoke_syscall+0x48/0x104 el0_svc_common.constprop.0+0x40/0xe0 do_el0_svc+0x1c/0x28 el0_svc+0x34/0xec el0t_64_sync_handler+0xa0/0xf0 el0t_64_sync+0x198/0x19c The __devm_regmap_init_slimbus() started to be used instead of __regmap_init_slimbus() after the commit mentioned above and turns out the incorrect bus_context pointer (3rd argument) was used in __devm_regmap_init_slimbus(). It should be just "slimbus" (which is equal to &slimbus->dev). Correct it. The wcd934x codec seems to be the only or the first user of devm_regmap_init_slimbus() but we should fix it till the point where __devm_regmap_init_slimbus() was introduced therefore two "Fixes" tags. While at this, also correct the same argument in __regmap_init_slimbus().

Metrics

CVSS 3.x Severity and Vector Strings:

NDDVolerionCVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CNA: kernel.orgCVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/02d3041caaa3fe4dd69e5a8afd1ac6b918ddc6a1 kernel.orgSource CodeVendor
https://git.kernel.org/stable/c/2664bfd8969d1c43dcbe3ea313f130dfa6b74f4c kernel.orgSource CodeVendor
https://git.kernel.org/stable/c/434f7349a1f00618a620b316f091bd13a12bc8d2 kernel.orgSource CodeVendor
https://git.kernel.org/stable/c/8143e4075d131c528540417a51966f6697be14eb kernel.orgSource CodeVendor
https://git.kernel.org/stable/c/a16e92f8d7dc7371e68f17a9926cb92d2244be7b kernel.orgSource CodeVendor

see all 8 references

Weakness Enumeration

No weakness enumeration is available for this CVE.

Affected Products

ProductVersions
Linux kernel
>= 6.18.0-rc1-00028, < 6.18.0-rc1-00029 (semver)

CPE

  • cpe:2.3:o:kernel:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:endpoint_security_linux_threat_prevention:*:*
  • cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • Upgrade: 6.18.0-rc1-00029moderate effort
Thundercomm Dragonboard 845c
All versions

CPE

  • cpe:2.3:h:qualcomm:sda845:*:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sda845_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:pm845:*:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sm8450p:*:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sm8450p_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:snapdragon_835_pc_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:snapdragon_835_pc:*:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sd845:*:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sd845_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sdr845:*:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sdr845_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:sda/sdm845_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:sda/sdm845:*:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:qualcomm_robotics_rb3_platform:*:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:qualcomm_robotics_rb3_platform_firmware:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
ASoC WCD934x
All versions

CPE

  • cpe:2.3:h:qualcomm:wcd9335:*:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:wcd9335_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:wcd9326:*:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:wcd9326_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:wcd9306:*:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:wcd9306_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:wcd9310:*:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:wcd9320:*:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:wcd9320_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:wcd9310_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:wcd9330:*:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:wcd9330_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:wcd9385_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:wcd9385:*:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:wcd934:*:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:wcd934_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:wcd9378_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:wcd9378:*:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:wcd9340_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:wcd9340:*:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:wcd9375_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:wcd9375:*:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:wcd9370_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:wcd9370:*:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:wcd9371:*:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:wcd9371_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:wcd9341_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:wcd9341:*:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:wcd9395:*:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:wcd9395_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:wcd9390:*:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:wcd9390_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:o:qualcomm:wcd9380_firmware:*:*:*:*:*:*:*:*
  • cpe:2.3:h:qualcomm:wcd9380:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

3 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2025-40317
NVD Published Date:
Dec 8, 2025
NVD Last Modified:
Jul 30, 2026
Source:
kernel.org