CVE-2025-39892

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: soc-core: care NULL dirver name on snd_soc_lookup_component_nolocked()

soc-generic-dmaengine-pcm.c uses same dev for both CPU and Platform.

In such case, CPU component driver might not have driver->name, then

snd_soc_lookup_component_nolocked() will be NULL pointer access error.

Care NULL driver name.

Call trace:

strcmp from snd_soc_lookup_component_nolocked+0x64/0xa4

snd_soc_lookup_component_nolocked from snd_soc_unregister_component_by_driver+0x2c/0x44

snd_soc_unregister_component_by_driver from snd_dmaengine_pcm_unregister+0x28/0x64

snd_dmaengine_pcm_unregister from devres_release_all+0x98/0xfc

devres_release_all from device_unbind_cleanup+0xc/0x60

device_unbind_cleanup from really_probe+0x220/0x2c8

really_probe from __driver_probe_device+0x88/0x1a0

__driver_probe_device from driver_probe_device+0x30/0x110

driver_probe_device from __driver_attach+0x90/0x178

__driver_attach from bus_for_ea

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References