CVE-2025-39930
Description
From CVE.org
In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai() commit 419d1918105e ("ASoC: simple-card-utils: use __free(device_node) for device node") uses __free(device_node) for dlc->of_node, but we need to keep it while driver is in use. Don't use __free(device_node) in graph_util_parse_dai().
Statement
This vulnerability carries negligible risk for Red Hat environments because the affected subsystem logic is not present in supported Red Hat Enterprise Linux kernels. The issue stems from modern resource management helpers within the ALSA System on Chip audio driver framework, which were introduced in more recent upstream development cycles. Consequently, enterprise systems and container hosts are protected against any potential stability issues or denial of service.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
