Vulnerability in Linux

CVE-2025-40045

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd937x: set the comp soundwire port correctly For some reason we endup with setting soundwire port for HPHL_COMP and HPHR_COMP as zero, this can potentially result in a memory corruption due to accessing and setting -1 th element of port_map array.

EPSS: 0.002 (4.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

  • Linux — versions 82be8c62a38c6a44e64ecb29d7a9b5cb35c6cad4, 6.11, 0

References

Frequently asked questions

What is CVE-2025-40045?
CVE-2025-40045 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2025-10-28.
How severe is CVE-2025-40045?
High severity. CVSS v3 base score is 7.8 out of 10.