{"id":"CVE-2025-40097","revision":"4c6cd3e46ec54e21b7036333bb5e040c","records":[{"revision":"4c6cd3e46ec54e21b7036333bb5e040c","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-40097","aliases":[],"title":"ALSA: hda: Fix missing pointer check in hda_component_manager_init function","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: hda: Fix missing pointer check in hda_component_manager_init function\n\nThe __component_match_add function may assign the 'matchptr' pointer\nthe value ERR_PTR(-ENOMEM), which will subsequently be dereferenced.\n\nThe call stack leading to the error looks like this:\n\nhda_component_manager_init\n|-> component_match_add\n    |-> component_match_add_release\n        |-> __component_match_add ( ... ,**matchptr, ... )\n            |-> *matchptr = ERR_PTR(-ENOMEM);       // assign\n|-> component_master_add_with_match( ...  match)\n    |-> component_match_realloc(match, match->num); // dereference\n\nAdd IS_ERR() check to prevent the crash.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.","state":0,"publishedAt":"2025-10-30T09:48:04.567+00:00","modifiedAt":"2026-10-03T10:55:28.438+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"sound/hda/codecs/side-codecs/hda_component.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"ae7abe36e352eddf8e30d3b1ea3fb402514ba13b\",\n                            \"lessThan\": \"b044aa6ae63391ba40c93ca5d476d276cb17db1b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"ae7abe36e352eddf8e30d3b1ea3fb402514ba13b\",\n                            \"lessThan\": \"1c3f4b15eb1850558d7d4da74b98cffbb8121721\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"ae7abe36e352eddf8e30d3b1ea3fb402514ba13b\",\n                            \"lessThan\": \"218a8504e62fc2c8a1fd12523346b7a2b9bd2474\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"ae7abe36e352eddf8e30d3b1ea3fb402514ba13b\",\n                            \"lessThan\": \"47d1b9ca923b55c3f407788f1f15b04957e0e027\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"ae7abe36e352eddf8e30d3b1ea3fb402514ba13b\",\n                            \"lessThan\": \"1cf11d80db5df805b538c942269e05a65bcaf5bc\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"sound/hda/codecs/side-codecs/hda_component.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.17\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.17\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.189\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.158\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.59\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.17.5\",\n                            \"lessThanOrEqual\": \"6.17.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/b044aa6ae63391ba40c93ca5d476d276cb17db1b","https://git.kernel.org/stable/c/1c3f4b15eb1850558d7d4da74b98cffbb8121721","https://git.kernel.org/stable/c/218a8504e62fc2c8a1fd12523346b7a2b9bd2474","https://git.kernel.org/stable/c/47d1b9ca923b55c3f407788f1f15b04957e0e027","https://git.kernel.org/stable/c/1cf11d80db5df805b538c942269e05a65bcaf5bc"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-40097","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-40097","identifiers":["CVE-2025-40097"]},"retained":false,"historicalAffected":[]}],"coverage":[]}