ACK: [SRU][P][PATCH 0/2] CVE-2025-38056
Wei-Lin Chang
weilin.chang at canonical.com
Thu Jul 3 04:18:04 UTC 2025
On Wed, Jul 02, 2025 at 04:17:28PM +0200, Juerg Haefliger wrote:
> https://ubuntu.com/security/CVE-2025-38056
>
>
> [ Impact ]
>
> Use-after-free on module reload.
>
>
> [ Test Case ]
>
> Compile-tested only.
>
>
> [ Where Problems Could Occur ]
>
> Isolated to snd-sof-intel-hda module. Problems might show up when
> this driver is loaded/used.
>
>
> Raag Jadav (1):
> devres: Introduce devm_kmemdup_array()
>
> Tavian Barnes (1):
> ASoC: SOF: Intel: hda: Fix UAF when reloading module
>
> include/linux/device.h | 5 +++++
> sound/soc/sof/intel/hda.c | 16 +++++++++++++++-
> 2 files changed, 20 insertions(+), 1 deletion(-)
>
> --
> 2.48.1
>
>
> --
> kernel-team mailing list
> kernel-team at lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team
Acked-by: Wei-Lin Chang <weilin.chang at canonical.com>
More information about the kernel-team
mailing list