https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 19:58:53 +0000 https://vulnerability.circl.lu/vuln/cve-2025-40097 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ALSA: hda: Fix missing pointer check in hda_component_manager_init function</p> <p>The __component_match_add function may assign the &#39;matchptr&#39; pointer the value ERR_PTR(-ENOMEM), which will subsequently be dereferenced.</p> <p>The call stack leading to the error looks like this:</p> <p>hda_component_manager_init |-&gt; component_match_add |-&gt; component_match_add_release |-&gt; __component_match_add ( ... ,**matchptr, ... ) |-&gt; *matchptr = ERR_PTR(-ENOMEM); // assign |-&gt; component_master_add_with_match( ... match) |-&gt; component_match_realloc(match, match-&gt;num); // dereference</p> <p>Add IS_ERR() check to prevent the crash.</p> <p>Found by Linux Verification Center (linuxtesting.org) with SVACE.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ALSA: hda: Fix missing pointer check in hda_component_manager_init function</p> <p>The __component_match_add function may assign the &#39;matchptr&#39; pointer the value ERR_PTR(-ENOMEM), which will subsequently be dereferenced.</p> <p>The call stack leading to the error looks like this:</p> <p>hda_component_manager_init |-&gt; component_match_add |-&gt; component_match_add_release |-&gt; __component_match_add ( ... ,**matchptr, ... ) |-&gt; *matchptr = ERR_PTR(-ENOMEM); // assign |-&gt; component_master_add_with_match( ... match) |-&gt; component_match_realloc(match, match-&gt;num); // dereference</p> <p>Add IS_ERR() check to prevent the crash.</p> <p>Found by Linux Verification Center (linuxtesting.org) with SVACE.</p> https://vulnerability.circl.lu/vuln/cve-2025-40097