CVE-2025-40045

In the Linux kernel, the following vulnerability has been resolved:

ASoC: codecs: wcd937x: set the comp soundwire port correctly

For some reason we endup with setting soundwire port for HPHL_COMP and HPHR_COMP as zero, this can potentially result in a memory corruption due to accessing and setting -1 th element of port_map array.

This vulnerability presents no direct security exposure to Red Hat customers because the affected Qualcomm sound hardware driver is not included in supported Red Hat Enterprise Linux releases. The underlying issue stems from improper soundwire port mapping that could trigger out-of-bounds memory access and potential kernel crashes on systems utilizing this specific audio codec. Because the vulnerable driver code is absent from Red Hat kernel packages, Red Hat enterprise products are unaffected.