https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 11:05:54 +0000 https://cve.radiocsirt.org/vuln/cve-2025-21870 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers</p> <p>Other, non DAI copier widgets could have the same stream name (sname) as the ALH copier and in that case the copier-&gt;data is NULL, no alh_data is attached, which could lead to NULL pointer dereference. We could check for this NULL pointer in sof_ipc4_prepare_copier_module() and avoid the crash, but a similar loop in sof_ipc4_widget_setup_comp_dai() will miscalculate the ALH device count, causing broken audio.</p> <p>The correct fix is to harden the matching logic by making sure that the 1. widget is a DAI widget - so dai = w-&gt;private is valid 2. the dai (and thus the copier) is ALH copier</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers</p> <p>Other, non DAI copier widgets could have the same stream name (sname) as the ALH copier and in that case the copier-&gt;data is NULL, no alh_data is attached, which could lead to NULL pointer dereference. We could check for this NULL pointer in sof_ipc4_prepare_copier_module() and avoid the crash, but a similar loop in sof_ipc4_widget_setup_comp_dai() will miscalculate the ALH device count, causing broken audio.</p> <p>The correct fix is to harden the matching logic by making sure that the 1. widget is a DAI widget - so dai = w-&gt;private is valid 2. the dai (and thus the copier) is ALH copier</p> https://cve.radiocsirt.org/vuln/cve-2025-21870