CVE-2025-37793: Linux kernel · ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe()
Affects Linux kernelSource GCVE Database
Not known to be exploited.
Data as of 5 Nov 2026, 23:23 UTC
Rated by Threat Radar · No CVSS score from NVD or the CNA
Thin evidence
One scorer or none- EPSS
- 0.1% chance of exploitation in 30 days – higher than 8% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Exploitation evidence
Disclosed: evidence found.
CVE published 1 May 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 5 Nov 2026.
Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe() devm_kasprintf() returns NULL when memory allocation fails. Currently, avs_component_probe() does not check for this case, which results in a NULL pointer dereference.
References
- git.kernel.org/stable/c/aaa93b8846101461de815759d39979661b82d5a5 (opens in a new tab)
- git.kernel.org/stable/c/23fde311ea1d0a6c36bf92ce48b90b77d0ece1a4 (opens in a new tab)
- git.kernel.org/stable/c/c2825073271b6f15e669a424b363612082494863 (opens in a new tab)
- git.kernel.org/stable/c/95f723cf141b95e3b3a5b92cf2ea98a863fe7275 (opens in a new tab)