CVE-2025-40162
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: amd/sdw_utils: avoid NULL deref when devm_kasprintf() fails devm_kasprintf() may return NULL on memory allocation failure, but the debug message prints cpus->dai_name before checking it. Move the dev_dbg() call after the NULL check to prevent potential NULL pointer dereference.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedNov 12, 2025
First seenNov 12, 2025
How to fix
Update
- Linux Linux095d692e5997ece300c89f10d903d5230090e6a0, a1cccbd19676fc36854535a7118ba2c27d0b84b3, 5726b68473f7153a7f6294185e5998b7e2a230a2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | cb8ea62e6402067ba092d4c1d66a9440513a572b ≤ v < 095d692e5997ece300c89f10d903d5230090e6a0, cb8ea62e6402067ba092d4c1d66a9440513a572b ≤ v < a1cccbd19676fc36854535a7118ba2c27d0b84b3, cb8ea62e6402067ba092d4c1d66a9440513a572b ≤ v < 5726b68473f7153a7f6294185e5998b7e2a230a2, 6.12 | 095d692e5997ece300c89f10d903d5230090e6a0, a1cccbd19676fc36854535a7118ba2c27d0b84b3, 5726b68473f7153a7f6294185e5998b7e2a230a2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.