CVE-2025-68345

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() The acpi_get_first_physical_node() function can return NULL, in which case the get_device() function also returns NULL, but this value is then dereferenced without checking,so add a check to prevent a crash. Found by Linux Verification Center (linuxtesting.org) with SVACE.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/343fa9800cf9870ec681e21f0a6f2157b74ae520
https://git.kernel.org/stable/c/7a35a505d76a4b6cd426b59ff2d800d0394cc5d3
https://git.kernel.org/stable/c/c28946b7409b7b68fb0481ec738c8b04578b11c6
https://git.kernel.org/stable/c/c34b04cc6178f33c08331568c7fd25c5b9a39f66
https://git.kernel.org/stable/c/e63f9c81ca28b06eeeac3630faddc50717897351
https://git.kernel.org/stable/c/e6ba921b17797ccc545d80e0dbccb5fab91c248c

Configurations

No configuration.

History

No history.

Information

Published : 2025-12-24 11:15

Updated : 2026-06-17 09:58

NVD link : CVE-2025-68345

Mitre link : CVE-2025-68345

CVE.ORG link : CVE-2025-68345

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2025-68345", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "7b2f3eb492dac7665c75df067e4d8e4869589f4a", "lessThan": "e63f9c81ca28b06eeeac3630faddc50717897351", "versionType": "git"}, {"status": "affected", "version": "7b2f3eb492dac7665c75df067e4d8e4869589f4a", "lessThan": "7a35a505d76a4b6cd426b59ff2d800d0394cc5d3", "versionType": "git"}, {"status": "affected", "version": "7b2f3eb492dac7665c75df067e4d8e4869589f4a", "lessThan": "e6ba921b17797ccc545d80e0dbccb5fab91c248c", "versionType": "git"}, {"status": "affected", "version": "7b2f3eb492dac7665c75df067e4d8e4869589f4a", "lessThan": "c28946b7409b7b68fb0481ec738c8b04578b11c6", "versionType": "git"}, {"status": "affected", "version": "7b2f3eb492dac7665c75df067e4d8e4869589f4a", "lessThan": "343fa9800cf9870ec681e21f0a6f2157b74ae520", "versionType": "git"}, {"status": "affected", "version": "7b2f3eb492dac7665c75df067e4d8e4869589f4a", "lessThan": "c34b04cc6178f33c08331568c7fd25c5b9a39f66", "versionType": "git"}], "programFiles": ["sound/hda/codecs/side-codecs/cs35l41_hda.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.17"}, {"status": "unaffected", "version": "0", "lessThan": "5.17", "versionType": "semver"}, {"status": "unaffected", "version": "6.1.160", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.120", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.64", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.17.13", "versionType": "semver", "lessThanOrEqual": "6.17.*"}, {"status": "unaffected", "version": "6.18.2", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "6.19", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["sound/hda/codecs/side-codecs/cs35l41_hda.c"], "defaultStatus": "affected"}]}], "published": "2025-12-24T11:15:57.850", "references": [{"url": "https://git.kernel.org/stable/c/343fa9800cf9870ec681e21f0a6f2157b74ae520", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/7a35a505d76a4b6cd426b59ff2d800d0394cc5d3", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c28946b7409b7b68fb0481ec738c8b04578b11c6", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c34b04cc6178f33c08331568c7fd25c5b9a39f66", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/e63f9c81ca28b06eeeac3630faddc50717897351", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/e6ba921b17797ccc545d80e0dbccb5fab91c248c", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Deferred", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()\n\nThe acpi_get_first_physical_node() function can return NULL, in which\ncase the get_device() function also returns NULL, but this value is\nthen dereferenced without checking,so add a check to prevent a crash.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE."}], "lastModified": "2026-06-17T09:58:58.480", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}