CVE-2025-38307

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
10/07/2025
Last modified:
10/07/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ASoC: Intel: avs: Verify content returned by parse_int_array()<br /> <br /> The first element of the returned array stores its length. If it is 0,<br /> any manipulation beyond the element at index 0 ends with null-ptr-deref.

Impact