CVE-2025-39696
kernel: ALSA: hda: tas2781: Fix wrong reference of tasdevice_priv
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · September 5, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
ALSA: hda: tas2781: Fix wrong reference of tasdevice_priv
During the conversion to unify the calibration data management, the reference to tasdevice_priv was wrongly set to h->hda_priv instead of h->priv. This resulted in memory corruption and crashes eventually. Unfortunately it's a void pointer, hence the compiler couldn't know that it's wrong.
Statement
This vulnerability presents no security risk to supported Red Hat Enterprise Linux releases because the affected audio driver code is not present in their shipping kernels. The issue is confined to systems operating with specialized Texas Instruments audio amplifier hardware, restricting potential exposure solely to environments with that physical device present. Even on systems featuring the relevant hardware, triggering the flaw requires local hardware interaction or audio driver initialization.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified