CVE-2025-68205

CVE-2025-68205

published December 16, 2025

CVSS
—
EPSS
0%
Percentile
7.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ALSA: hda/hdmi: Fix breakage at probing nvhdmi-mcp driver

After restructuring and splitting the HDMI codec driver code, each

HDMI codec driver contains the own build_controls and build_pcms ops.

A copy-n-paste error put the wrong entries for nvhdmi-mcp driver; both

build_controls and build_pcms are swapped. Unfortunately both

callbacks have the very same form, and the compiler didn't complain

it, either. This resulted in a NULL dereference because the PCM

instance hasn't been initialized at calling the build_controls

callback.

Fix it by passing the proper entries.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00185 · 7.7th percentile
Published
2025-12-16T19:15Z
References (2)
EPSS history
Timeline
  • 16 DEC 13:48Z
    ALSA: hda/hdmi: Fix breakage at probing nvhdmi-mcp driver
    cvelistv5