CVE-2025-39930
kernel: ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai()
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · April 18, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai()
commit 419d1918105e ("ASoC: simple-card-utils: use __free(device_node) for device node") uses __free(device_node) for dlc->of_node, but we need to keep it while driver is in use.
Don't use __free(device_node) in graph_util_parse_dai().
Statement
This vulnerability carries negligible risk for Red Hat environments because the affected subsystem logic is not present in supported Red Hat Enterprise Linux kernels. The issue stems from modern resource management helpers within the ALSA System on Chip audio driver framework, which were introduced in more recent upstream development cycles. Consequently, enterprise systems and container hosts are protected against any potential stability issues or denial of service.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified