Beveiligingsadvies

CVE-2025-40344

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-09 04:10:03
Laatst bijgewerkt 2026-08-05 12:09:47
Toegewezen door Linux
CVSS-score 7.8
Status PUBLISHED

Beschrijving

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Disable periods-elapsed work when closing PCM avs_dai_fe_shutdown() handles the shutdown procedure for HOST HDAudio stream while period-elapsed work services its IRQs. As the former frees the DAI's private context, these two operations shall be synchronized to avoid slab-use-after-free or worse errors.