CVE-2025-39938

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed

If earlier opening of source graph fails (e.g. ADSP rejects due to

incorrect audioreach topology), the graph is closed and

"dai_data->graph[dai->id]" is assigned NULL. Preparing the DAI for sink

graph continues though and next call to q6apm_lpass_dai_prepare()

receives dai_data->graph[dai->id]=NULL leading to NULL pointer

exception:

qcom-apm gprsvc:service:2:1: Error (1) Processing 0x01001002 cmd

qcom-apm gprsvc:service:2:1: DSP returned error[1001002] 1

q6apm-lpass-dais 30000000.remoteproc:glink-edge:gpr:service@1:bedais: fail to start APM port 78

q6apm-lpass-dais 30000000.remoteproc:glink-edge:gpr:service@1:bedais: ASoC: error at snd_soc_pcm_dai_prepare on TX_CODEC_DMA_TX_3: -22

Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a8

...

Call trace:

q6apm_graph_media_format_pcm+0x48/0x12

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References