CVE-2025-39959

A flaw was found in the Linux kernel’s ASoC AMD ACP I2S driver (sound/soc/amd/acp/acp-i2s.c). Some functions used the wrong helper to obtain the device’s ACP chip information, which left certain acp_chip_info members unset and could result in a NULL pointer dereference in acp_i2s_set_fmt(), acp_i2s_hw_params(), acp_i2s_trigger() and acp_i2s_startup(). A local attacker with access to the audio device interface could cause a denial-of-service (kernel crash)

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.