CVE-2025-40344

CVE-2025-40344

High · published December 9, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
6.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ASoC: Intel: avs: Disable periods-elapsed work when closing PCM

avs_dai_fe_shutdown() handles the shutdown procedure for HOST HDAudio

stream while period-elapsed work services its IRQs. As the former

frees the DAI's private context, these two operations shall be

synchronized to avoid slab-use-after-free or worse errors.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00174 · 6.5th percentile
Published
2025-12-09T21:17Z
References (3)
https://git.kernel.org/stable/c/845f716dc5f354c719f6fda35048b6c2eca99331 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b41fca4aa60be896ba8a81b57aac5dcc6eee66c0 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ca6d2b7aca778afbf8c0c4b330d10cb228c14052 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 09 DEC 04:10Z
    ASoC: Intel: avs: Disable periods-elapsed work when closing PCM
    cvelistv5