Critical Vulnerability in Linux Kernel: NULL Pointer Dereference in ASoC AMD ACP
Summary
DEBIAN-CVE-2025-37919: In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp: Fix NULL pointer deref in acp_i2s_set_tdm_slot Update chip data using dev_get_drvdata(dev->parent) to fix NULL pointer deref in acp_i2s_... Affects linux versions < 6.12.29-1. Fixed in 6.12.29-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interactions. It is widely used across various platforms, including servers, desktops, and embedded systems. The kernel's stability and security are paramount, as vulnerabilities can lead to system crashes or unauthorized access. This specific vulnerability affects the ASoC (ALSA System on Chip) subsystem, which is responsible for audio processing in devices utilizing AMD's ACP (Audio CoProcessor).
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the ASoC AMD ACP driver, specifically in the function acp_i2s_set_tdm_slot. This issue arises from a NULL pointer dereference when attempting to update chip data using dev_get_drvdata(dev->parent). If exploited, this vulnerability could lead to system crashes or denial of service, impacting the overall stability of the system. The vulnerability is present in versions prior to 6.12.29-1 and has been resolved in the patched version.
How To Fix
Minimum fixed version
6.12.29-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch by updating to the fixed version.
Conclusion
The identified vulnerability in the Linux kernel poses a significant risk due to its potential to cause system crashes. Users are strongly advised to update to the patched version 6.12.29-1 to ensure their systems remain secure. Regular monitoring for vulnerabilities using tools like Vulert can help maintain system integrity.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a NULL pointer dereference in the ASoC AMD ACP driver, which can lead to system crashes.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which requires no signup.
Exploitation of this vulnerability could result in system instability, crashes, or denial of service.
Yes, the vulnerability has been patched in version 6.12.29-1 of the Linux kernel.
While there are no specific workarounds, it is recommended to prioritize updating your system to mitigate the risk.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
