CVE Database›Document archive›CVE-2025-39696

CVE-2025-39696

kernel: ALSA: hda: tas2781: Fix wrong reference of tasdevice_priv

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · September 5, 2025

Updated · October 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: hda: tas2781: Fix wrong reference of tasdevice_priv

During the conversion to unify the calibration data management, the reference to tasdevice_priv was wrongly set to h->hda_priv instead of h->priv. This resulted in memory corruption and crashes eventually. Unfortunately it's a void pointer, hence the compiler couldn't know that it's wrong.

Statement

This vulnerability presents no security risk to supported Red Hat Enterprise Linux releases because the affected audio driver code is not present in their shipping kernels. The issue is confined to systems operating with specialized Texas Instruments audio amplifier hardware, restricting potential exposure solely to environments with that physical device present. Even on systems featuring the relevant hardware, triggering the flaw requires local hardware interaction or audio driver initialization.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified