CVE-2025-68205

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/hdmi: Fix breakage at probing nvhdmi-mcp driver After restructuring and splitting the HDMI codec driver code, each HDMI codec driver contains the own build_controls and build_pcms ops. A copy-n-paste error put the wrong entries for nvhdmi-mcp driver; both build_controls and build_pcms are swapped. Unfortunately both callbacks have the very same form, and the compiler didn't complain it, either. This resulted in a NULL dereference because the PCM instance hasn't been initialized at calling the build_controls callback. Fix it by passing the proper entries.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/82420bd4e17bdaba8453fbf9e10c58c9ed0c9727
https://git.kernel.org/stable/c/d2aed6fac1148528181affb781aa683d6569042b

Configurations

No configuration.

History

No history.

Information

Published : 2025-12-16 14:15

Updated : 2026-06-17 09:58

NVD link : CVE-2025-68205

Mitre link : CVE-2025-68205

CVE.ORG link : CVE-2025-68205

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2025-68205", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "ad781b550f9a8829e3dae4bd3d18c4a126a53d04", "lessThan": "d2aed6fac1148528181affb781aa683d6569042b", "versionType": "git"}, {"status": "affected", "version": "ad781b550f9a8829e3dae4bd3d18c4a126a53d04", "lessThan": "82420bd4e17bdaba8453fbf9e10c58c9ed0c9727", "versionType": "git"}], "programFiles": ["sound/hda/codecs/hdmi/nvhdmi-mcp.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.17"}, {"status": "unaffected", "version": "0", "lessThan": "6.17", "versionType": "semver"}, {"status": "unaffected", "version": "6.17.9", "versionType": "semver", "lessThanOrEqual": "6.17.*"}, {"status": "unaffected", "version": "6.18", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["sound/hda/codecs/hdmi/nvhdmi-mcp.c"], "defaultStatus": "affected"}]}], "published": "2025-12-16T14:15:53.377", "references": [{"url": "https://git.kernel.org/stable/c/82420bd4e17bdaba8453fbf9e10c58c9ed0c9727", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d2aed6fac1148528181affb781aa683d6569042b", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Deferred", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: hda/hdmi: Fix breakage at probing nvhdmi-mcp driver\n\nAfter restructuring and splitting the HDMI codec driver code, each\nHDMI codec driver contains the own build_controls and build_pcms ops.\nA copy-n-paste error put the wrong entries for nvhdmi-mcp driver; both\nbuild_controls and build_pcms are swapped. Unfortunately both\ncallbacks have the very same form, and the compiler didn't complain\nit, either. This resulted in a NULL dereference because the PCM\ninstance hasn't been initialized at calling the build_controls\ncallback.\n\nFix it by passing the proper entries."}], "lastModified": "2026-06-17T09:58:43.983", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}