CVE-2025-40121
In the Linux kernel, the following vulnerability has been resolved:
ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
When an invalid value is passed via quirk option, currently bytcr_rt5640 driver just ignores and leaves as is, which may lead to unepxected results like OOB access.
This patch adds the sanity check and corrects the input mapping to the certain default value if an invalid value is passed.
CVSS
NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.22%
- Percentil entre todas las CVEs puntuadas: 11
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
Referencias
- https://git.kernel.org/stable/c/2204e582b4eea872e1e7a5c90edcb84b928c68b0
- https://git.kernel.org/stable/c/4336efb59ef364e691ef829a73d9dbd4d5ed7c7b
- https://git.kernel.org/stable/c/64a36a7032082b4c330ce081acb6efb99246020e
- https://git.kernel.org/stable/c/95e29db33b5f73218ae08ebb48c61c9a8d28e2ff
- https://git.kernel.org/stable/c/bff827b0d507e52b23efab9f67c232a4f037ab2c
- https://git.kernel.org/stable/c/c60f269c123210a6846d6d1367de0eaa402c10b0
- https://git.kernel.org/stable/c/f197894de2f4ef46c7d53827d9df294b75c35e13
- https://git.kernel.org/stable/c/fdf99978a6480e14405212472b6c747e0fa43bed
JSON original (NVD)
Mostrar
{
"id": "CVE-2025-40121",
"cveTags": [],
"metrics": {},
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "64484ccee7af53f08cca2ee3853cb8e18914d8b2",
"lessThan": "bff827b0d507e52b23efab9f67c232a4f037ab2c",
"versionType": "git"
},
{
"status": "affected",
"version": "64484ccee7af53f08cca2ee3853cb8e18914d8b2",
"lessThan": "64a36a7032082b4c330ce081acb6efb99246020e",
"versionType": "git"
},
{
"status": "affected",
"version": "64484ccee7af53f08cca2ee3853cb8e18914d8b2",
"lessThan": "95e29db33b5f73218ae08ebb48c61c9a8d28e2ff",
"versionType": "git"
},
{
"status": "affected",
"version": "64484ccee7af53f08cca2ee3853cb8e18914d8b2",
"lessThan": "2204e582b4eea872e1e7a5c90edcb84b928c68b0",
"versionType": "git"
},
{
"status": "affected",
"version": "64484ccee7af53f08cca2ee3853cb8e18914d8b2",
"lessThan": "f197894de2f4ef46c7d53827d9df294b75c35e13",
"versionType": "git"
},
{
"status": "affected",
"version": "64484ccee7af53f08cca2ee3853cb8e18914d8b2",
"lessThan": "fdf99978a6480e14405212472b6c747e0fa43bed",
"versionType": "git"
},
{
"status": "affected",
"version": "64484ccee7af53f08cca2ee3853cb8e18914d8b2",
"lessThan": "c60f269c123210a6846d6d1367de0eaa402c10b0",
"versionType": "git"
},
{
"status": "affected",
"version": "64484ccee7af53f08cca2ee3853cb8e18914d8b2",
"lessThan": "4336efb59ef364e691ef829a73d9dbd4d5ed7c7b",
"versionType": "git"
}
],
"programFiles": [
"sound/soc/intel/boards/bytcr_rt5651.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "4.18"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "4.18",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.4.301",
"versionType": "semver",
"lessThanOrEqual": "5.4.*"
},
{
"status": "unaffected",
"version": "5.10.246",
"versionType": "semver",
"lessThanOrEqual": "5.10.*"
},
{
"status": "unaffected",
"version": "5.15.195",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.156",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.112",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.53",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.17.3",
"versionType": "semver",
"lessThanOrEqual": "6.17.*"
},
{
"status": "unaffected",
"version": "6.18",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"sound/soc/intel/boards/bytcr_rt5651.c"
],
"defaultStatus": "affected"
}
]
}
],
"published": "2025-11-12T11:15:41.553",
"references": [
{
"url": "https://git.kernel.org/stable/c/2204e582b4eea872e1e7a5c90edcb84b928c68b0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/4336efb59ef364e691ef829a73d9dbd4d5ed7c7b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/64a36a7032082b4c330ce081acb6efb99246020e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/95e29db33b5f73218ae08ebb48c61c9a8d28e2ff",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/bff827b0d507e52b23efab9f67c232a4f037ab2c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/c60f269c123210a6846d6d1367de0eaa402c10b0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/f197894de2f4ef46c7d53827d9df294b75c35e13",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/fdf99978a6480e14405212472b6c747e0fa43bed",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
],
"vulnStatus": "Deferred",
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping\n\nWhen an invalid value is passed via quirk option, currently\nbytcr_rt5640 driver just ignores and leaves as is, which may lead to\nunepxected results like OOB access.\n\nThis patch adds the sanity check and corrects the input mapping to the\ncertain default value if an invalid value is passed."
}
],
"lastModified": "2026-06-17T09:21:18.010",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}