CVE-2025-40132

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback In create_sdw_dailink() check that sof_end->codec_info->add_sidecar is not NULL before calling it. The original code assumed that if include_sidecar is true, the codec on that link has an add_sidecar callback. But there could be other codecs on the same link that do not have an add_sidecar callback.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedNov 12, 2025
First seenNov 12, 2025

How to fix

Update
  • Linux Linuxaea038062edfca9c6e5ddcecd4611d5a80113b4e, a5416c0fc9e77b69f853dfb1e78bc05a7c06a789, 87cab86925b7fa4c1c977bc191ac549a3b23f0ea or later

Affected products

ProductAffected versionsFixed in
Linux Linuxda5244180281a18c4c7859674fec308514aaf629 ≤ v < aea038062edfca9c6e5ddcecd4611d5a80113b4e, da5244180281a18c4c7859674fec308514aaf629 ≤ v < a5416c0fc9e77b69f853dfb1e78bc05a7c06a789, da5244180281a18c4c7859674fec308514aaf629 ≤ v < 87cab86925b7fa4c1c977bc191ac549a3b23f0ea, 6.10aea038062edfca9c6e5ddcecd4611d5a80113b4e, a5416c0fc9e77b69f853dfb1e78bc05a7c06a789, 87cab86925b7fa4c1c977bc191ac549a3b23f0ea

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.