CVE-2025-37941

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-37941
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd937x: fix a potential memory leak in wcd937x_soc_codec_probe() When snd_soc_dapm_new_controls() or snd_soc_dapm_add_routes() fails, wcd937x_soc_codec_probe() returns without releasing 'wcd937x->clsh_info', which is allocated by wcd_clsh_ctrl_alloc. Add wcd_clsh_ctrl_free() to prevent potential memory leak.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3e330acf4efd63876d673c046cd073a1d4ed57a8 Patch
https://git.kernel.org/stable/c/aafb5325aca3e806b3ea3707402189263473d257 Patch
https://git.kernel.org/stable/c/acadb2e2b3c5b9977a843a3a94fece9bdcf6aea1 Patch
https://git.kernel.org/stable/c/b573e04116fd33b9143fa276bbab2f0afad0a1ae Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

17 Nov 2025, 12:58

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/3e330acf4efd63876d673c046cd073a1d4ed57a8 - () https://git.kernel.org/stable/c/3e330acf4efd63876d673c046cd073a1d4ed57a8 - Patch
References () https://git.kernel.org/stable/c/aafb5325aca3e806b3ea3707402189263473d257 - () https://git.kernel.org/stable/c/aafb5325aca3e806b3ea3707402189263473d257 - Patch
References () https://git.kernel.org/stable/c/acadb2e2b3c5b9977a843a3a94fece9bdcf6aea1 - () https://git.kernel.org/stable/c/acadb2e2b3c5b9977a843a3a94fece9bdcf6aea1 - Patch
References () https://git.kernel.org/stable/c/b573e04116fd33b9143fa276bbab2f0afad0a1ae - () https://git.kernel.org/stable/c/b573e04116fd33b9143fa276bbab2f0afad0a1ae - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ASoC: códecs: wcd937x: se corrige una posible pérdida de memoria en wcd937x_soc_codec_probe(). Cuando fallan snd_soc_dapm_new_controls() o snd_soc_dapm_add_routes(), wcd937x_soc_codec_probe() regresa sin liberar 'wcd937x->clsh_info', que está asignado por wcd_clsh_ctrl_alloc. Se ha añadido wcd_clsh_ctrl_free() para evitar posibles pérdidas de memoria.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
CWE CWE-401

20 May 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-20 16:15

Updated : 2025-11-17 12:58

NVD link : CVE-2025-37941

Mitre link : CVE-2025-37941

CVE.ORG link : CVE-2025-37941

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime