ASoC: codecs: wcd937x: fix a potential memory leak in wcd937x_soc_codec_probe() (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.20 % · percentile 10 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Analyzed
Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd937x: fix a potential memory leak in wcd937x_soc_codec_probe() When snd_soc_dapm_new_controls() or snd_soc_dapm_add_routes() fails, wcd937x_soc_codec_probe() returns without releasing 'wcd937x->clsh_info', which is allocated by wcd_clsh_ctrl_alloc. Add wcd_clsh_ctrl_free() to prevent potential memory leak.
Weaknesses (CWE)
- CWE-401 — Missing Release of Memory after Effective Lifetime
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2025-15843
- GCVE · GCVE-0-2025-37941
CERT-FR advisories
- CERTFR-2025-AVI-0589 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0559 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.11 < 6.12.24cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.13 < 6.13.12cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.14 < 6.14.3
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 313e978df7fc38b9e949ac5933d0d9d56d5e8a9c < acadb2e2b3c5b9977a843a3a94fece9bdcf6aea1 ; affected 313e978df7fc38b9e949ac5933d0d9d56d5e8a9c < b573e04116fd33b9143fa276bbab2f0afad0a1ae ; affected 313e978df7fc38b9e949ac5933d0d9d56d5e8a9c < aafb5325aca3e806b3ea3707402189263473d257 ; affected 313e978df7fc38b9e949ac5933d0d9d56d5e8a9c < 3e330acf4efd63876d673c046cd073a1d4ed57a8 |
| Linux · Linux | affected 6.11 ; unaffected 0 < 6.11 ; unaffected 6.12.24 ≤ 6.12.* ; unaffected 6.13.12 ≤ 6.13.* ; unaffected 6.14.3 ≤ 6.14.* ; unaffected 6.15 ≤ * |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |