Vulnerability Database

309,136

Total vulnerabilities in the database

CVE-2025-38308

In the Linux kernel, the following vulnerability has been resolved:

ASoC: Intel: avs: Fix possible null-ptr-deref when initing hw

Search result of avs_dai_find_path_template() shall be verified before being used. As 'template' is already known when avs_hw_constraints_init() is fired, drop the search entirely.

  • Published: Jul 10, 2025
  • Updated: Nov 19, 2025
  • CVE: CVE-2025-38308
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.5
  • AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWEs:

Software From Fixed in
linux / linux_kernel 6.15.1 6.15.3
linux / linux_kernel 6.15 6.15.x
linux / linux_kernel 6.15-rc3 6.15-rc3.x
linux / linux_kernel 6.15-rc4 6.15-rc4.x
linux / linux_kernel 6.15-rc5 6.15-rc5.x
linux / linux_kernel 6.15-rc6 6.15-rc6.x
linux / linux_kernel 6.15-rc7 6.15-rc7.x