ACK: [SRU][P][PATCH 0/2] CVE-2025-38056

Wei-Lin Chang weilin.chang at canonical.com
Thu Jul 3 04:18:04 UTC 2025


On Wed, Jul 02, 2025 at 04:17:28PM +0200, Juerg Haefliger wrote:
> https://ubuntu.com/security/CVE-2025-38056
> 
> 
> [ Impact ]
> 
> Use-after-free on module reload.
> 
> 
> [ Test Case ]
> 
> Compile-tested only.
> 
> 
> [ Where Problems Could Occur ]
> 
> Isolated to snd-sof-intel-hda module. Problems might show up when
> this driver is loaded/used.
> 
> 
> Raag Jadav (1):
>   devres: Introduce devm_kmemdup_array()
> 
> Tavian Barnes (1):
>   ASoC: SOF: Intel: hda: Fix UAF when reloading module
> 
>  include/linux/device.h    |  5 +++++
>  sound/soc/sof/intel/hda.c | 16 +++++++++++++++-
>  2 files changed, 20 insertions(+), 1 deletion(-)
> 
> -- 
> 2.48.1
> 
> 
> -- 
> kernel-team mailing list
> kernel-team at lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team

Acked-by: Wei-Lin Chang <weilin.chang at canonical.com>



More information about the kernel-team mailing list