ACK: [SRU][P][PATCH 0/2] CVE-2025-38056

Chia-Lin Kao (AceLan) acelan.kao at canonical.com
Tue Jul 8 05:12:01 UTC 2025


On Wed, Jul 02, 2025 at 04:17:28PM +0200, Juerg Haefliger wrote:
> https://ubuntu.com/security/CVE-2025-38056
> 
> 
> [ Impact ]
> 
> Use-after-free on module reload.
> 
> 
> [ Test Case ]
> 
> Compile-tested only.
> 
> 
> [ Where Problems Could Occur ]
> 
> Isolated to snd-sof-intel-hda module. Problems might show up when
> this driver is loaded/used.
> 
> 
> Raag Jadav (1):
>   devres: Introduce devm_kmemdup_array()
> 
> Tavian Barnes (1):
>   ASoC: SOF: Intel: hda: Fix UAF when reloading module
> 
>  include/linux/device.h    |  5 +++++
>  sound/soc/sof/intel/hda.c | 16 +++++++++++++++-
>  2 files changed, 20 insertions(+), 1 deletion(-)
> 
> -- 
> 2.48.1
> 
Acked-by: Chia-Lin Kao (AceLan) <acelan.kao at canonical.com>

> 
> -- 
> kernel-team mailing list
> kernel-team at lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team



More information about the kernel-team mailing list