CVE-2025-38056

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture (ALSA) Sound Open Firmware (SOF) Intel High Definition Audio (HDA) driver. A local user could exploit a use-after-free vulnerability when reloading the module. This occurs because the hda_generic_machine_select() function incorrectly stores a pointer to freed memory in a global variable. Successful exploitation of this flaw could lead to information disclosure, privilege escalation, or a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the snd_sof_intel_hda_generic kernel module from loading. This can be achieved by blacklisting the module.\n1. Create a file /etc/modprobe.d/blacklist-snd_sof_intel_hda_generic.conf with the following content:\n \n blacklist snd_sof_intel_hda_generic\n \n2. Regenerate the initramfs:\n bash\n dracut -f -v\n \n3. Reboot the system for the changes to take effect.\nThis mitigation may impact audio functionality if the snd_sof_intel_hda_generic module is required for sound hardware. A system reboot is required for the changes to take effect.