CVE-2025-40013

CVE-2025-40013

published October 20, 2025

CVSS
—
EPSS
0%
Percentile
15.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ASoC: qcom: audioreach: fix potential null pointer dereference

It is possible that the topology parsing function

audioreach_widget_load_module_common() could return NULL or an error

pointer. Add missing NULL check so that we do not dereference it.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00253 · 15.8th percentile
Published
2025-10-20T20:15Z
References (6)
https://git.kernel.org/stable/c/4dda55d04caac3b4102c26e29b1c27fa35636be3 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/70e1e5fe9f7e05ff831b56ebc02543e7811b8e18 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8318e04ab2526b155773313b66a1542476ce1106 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8f9c9fafc0e7a73bbff58954d171c016ddee1734 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9c1ad4192f3d2fc85339718a6252cb3337848f7b · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ef08ce6304d30b5778035d07b04514cb70839983 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 20 OCT 15:29Z
    ASoC: qcom: audioreach: fix potential null pointer dereference
    cvelistv5