CVE-2025-21870

MEDIUM EPSS 7.5%
Published Mar 27, 20251y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Mar 27, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers Other, non DAI copier widgets could have the same stream name (sname) as the ALH copier and in that case the copier->data is NULL, no alh_data is attached, which could lead to NULL pointer dereference. We could check for this NULL pointer in sof_ipc4_prepare_copier_module() and avoid the crash, but a similar loop in sof_ipc4_widget_setup_comp_dai() will miscalculate the ALH device count, causing broken audio. The correct fix is to harden the matching logic by making sure that the 1. widget is a DAI widget - so dai = w->private is valid 2. the dai (and thus the copier) is ALH copier

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
7.5% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 5

VendorProductVersionRange
linuxlinux_kernel*≥6.0  –  <6.12.17
linuxlinux_kernel*≥6.13  –  <6.13.5
linuxlinux_kernel6.14any
linuxlinux_kernel6.14any
linuxlinux_kernel6.14any

References 3

  • git.kernel.org https://git.kernel.org/stable/c/6fd60136d256b3b948333ebdb3835f41a95ab7ef
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/87c8768a96092ce75cd47fe076db5080db7ac515
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/93c6c2e5801aab09ef1ef99f248f3cd323c3f152
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/6fd60136d256b3b948333ebdb3835f41a95ab7ef
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/87c8768a96092ce75cd47fe076db5080db7ac515
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/93c6c2e5801aab09ef1ef99f248f3cd323c3f152
    Patch