CVE-2025-39959CWE-476

CVE-2025-39959

Medium · published October 9, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
2.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ASoC: amd: acp: Fix incorrect retrival of acp_chip_info

Use dev_get_drvdata(dev->parent) instead of dev_get_platdata(dev)

to correctly obtain acp_chip_info members in the acp I2S driver.

Previously, some members were not updated properly due to incorrect

data access, which could potentially lead to null pointer

dereferences.

This issue was missed in the earlier commit

("ASoC: amd: acp: Fix NULL pointer deref in acp_i2s_set_tdm_slot"),

which only addressed set_tdm_slot(). This change ensures that all

relevant functions correctly retrieve acp_chip_info, preventing

further null pointer dereference issues.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00127 · 2.2th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2025-10-09T14:15Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 6.15, < 6.16.96.16.9
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (2)
EPSS history
Timeline
  • 09 OCT 09:47Z
    ASoC: amd: acp: Fix incorrect retrival of acp_chip_info
    cvelistv5