{"id":"CVE-2025-38706","title":"ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()\n\nsnd_soc_remove_pcm_runtime() might be called with rtd == NULL which will\nleads to null pointer derefe…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 < 8b465bedc2b417fd27c1d1ab7122882b4b60b1a0","Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 < 82ba7b8cf9f6e3bf392a9f08ba3d1c0b200ccb94","Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 < 7f8fc03712194fd4e2df28af7f7f7a38205934ef","Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 < 41f53afe53a57a7c50323f99424b598190acf192","Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 < 2fce20decc6a83f16dd73744150c4e7ea6c97c21","Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 < cecc65827ef3df9754e097582d89569139e6cd1e","Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 < 7ce0a7255ce97ed7c54afae83fdbce712a1f0c9e","Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 < 2d91cb261cac6d885954b8f5da28b5c176c18131","Linux 5.6"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T21:07:47.507300Z"},"published":"2025-09-04","updated":"2026-11-05","sourceUpdated":"2026-11-05T21:12:53.938Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-38706","references":[{"url":"https://git.kernel.org/stable/c/8b465bedc2b417fd27c1d1ab7122882b4b60b1a0"},{"url":"https://git.kernel.org/stable/c/82ba7b8cf9f6e3bf392a9f08ba3d1c0b200ccb94"},{"url":"https://git.kernel.org/stable/c/7f8fc03712194fd4e2df28af7f7f7a38205934ef"},{"url":"https://git.kernel.org/stable/c/41f53afe53a57a7c50323f99424b598190acf192"},{"url":"https://git.kernel.org/stable/c/2fce20decc6a83f16dd73744150c4e7ea6c97c21"},{"url":"https://git.kernel.org/stable/c/cecc65827ef3df9754e097582d89569139e6cd1e"},{"url":"https://git.kernel.org/stable/c/7ce0a7255ce97ed7c54afae83fdbce712a1f0c9e"},{"url":"https://git.kernel.org/stable/c/2d91cb261cac6d885954b8f5da28b5c176c18131"}],"tags":["cve.org"],"epss":0.00204,"epssPercentile":0.10453,"ingestedAt":"2026-11-05T22:38:32.015Z","slug":"CVE-2025-38706","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()\n\nsnd_soc_remove_pcm_runtime() might be called with rtd == NULL which will\nleads to null pointer dereference.\nThis was reproduced with topology loading and marking a link as ignore\ndue to missing hardware component on the system.\nOn module removal the soc_tplg_remove_link() would call\nsnd_soc_remove_pcm_runtime() with rtd == NULL since the link was ignored,\nno runtime was created.\n\n## Affected\n\n- `Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 < 8b465bedc2b417fd27c1d1ab7122882b4b60b1a0`\n- `Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 < 82ba7b8cf9f6e3bf392a9f08ba3d1c0b200ccb94`\n- `Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 < 7f8fc03712194fd4e2df28af7f7f7a38205934ef`\n- `Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 < 41f53afe53a57a7c50323f99424b598190acf192`\n- `Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 < 2fce20decc6a83f16dd73744150c4e7ea6c97c21`\n- `Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 < cecc65827ef3df9754e097582d89569139e6cd1e`\n- `Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 < 7ce0a7255ce97ed7c54afae83fdbce712a1f0c9e`\n- `Linux >= 50cd9b5317d5593d0a33f4227f56ddcc1bf66604 < 2d91cb261cac6d885954b8f5da28b5c176c18131`\n- `Linux 5.6`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}