ALSA: hda: Fix missing pointer check in hda_component_manager_init function
CVE-2025-40097 is fixed in 20 products on 1 platform, first by DEBIAN-CVE-2025-40097, released October 30, 2025. It is not reported as exploited. Patch Radar priority: Routine.
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix missing pointer check in hda_component_manager_init function The __component_match_add function may assign the 'matchptr' pointer the value ERR_PTR(-ENOMEM), which will subsequently be dereferenced. The call stack leading to the error looks like this: hda_component_manager_init |-> component_match_add |-> component_match_add_release |-> __component_match_add ( ... ,**matchptr, ... ) |-> *matchptr = ERR_PTR(-ENOMEM); // assign |-> component_master_add_with_match( ... match) |-> component_match_realloc(match, match->num); // dereference Add IS_ERR() check to prevent the crash. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| dtb-aarch64 · opensuse-leap 15.6 | 6.4.0-150600.23.87.1 | SUSE-SU-2026:0471-1 | Feb 12, 2026 |
| dtb-aarch64 · opensuse-leap 16.0 | 6.12.0-160000.26.1 | OPENSUSE-SU-2026:20287-1 | Feb 27, 2026 |
| kernel-64kb · opensuse-leap 15.6 | 6.4.0-150600.23.87.1 | SUSE-SU-2026:0471-1 | Feb 12, 2026 |
| kernel-64kb · opensuse-leap 16.0 | 6.12.0-160000.26.1 | OPENSUSE-SU-2026:20287-1 | Feb 27, 2026 |
| kernel-64kb · sles 15.7 | 6.4.0-150700.53.31.1 | SUSE-SU-2026:0447-1 | Feb 11, 2026 |
| kernel-64kb · sles 16.0 | 6.12.0-160000.26.1 | SUSE-SU-2026:20599-1 | Feb 27, 2026 |
| kernel-azure · opensuse-leap 16.0 | 6.12.0-160000.26.1 | OPENSUSE-SU-2026:20287-1 | Feb 27, 2026 |
| kernel-azure · sles 15.7 | 6.4.0-150700.20.27.1 | SUSE-SU-2026:0472-1 | Feb 12, 2026 |
| kernel-azure · sles 16.0 | 6.12.0-160000.26.1 | SUSE-SU-2026:20599-1 | Feb 27, 2026 |
| kernel-debug · opensuse-leap 15.6 | 6.4.0-150600.23.87.1 | SUSE-SU-2026:0471-1 | Feb 12, 2026 |
| kernel-default · opensuse-leap 15.6 | 6.4.0-150600.23.87.1 | SUSE-SU-2026:0471-1 | Feb 12, 2026 |
| kernel-default · opensuse-leap 16.0 | 6.12.0-160000.26.1 | OPENSUSE-SU-2026:20287-1 | Feb 27, 2026 |
| kernel-default · sles 15.6 | 6.4.0-150600.23.87.1 | SUSE-SU-2026:0471-1 | Feb 12, 2026 |
| kernel-default · sles 15.7 | 6.4.0-150700.53.31.1 | SUSE-SU-2026:0447-1 | Feb 11, 2026 |
| kernel-default · sles 16.0 | 6.12.0-160000.26.1 | SUSE-SU-2026:20599-1 | Feb 27, 2026 |
| kernel-default-base · opensuse-leap 15.6 | 6.4.0-150600.23.87.1.150600.12.40.1 | SUSE-SU-2026:0471-1 | Feb 12, 2026 |
| kernel-default-base · opensuse-leap 16.0 | 6.12.0-160000.26.1.160000.2.7 | OPENSUSE-SU-2026:20287-1 | Feb 27, 2026 |
| kernel-default-base · sles 15.6 | 6.4.0-150600.23.87.1.150600.12.40.1 | SUSE-SU-2026:0471-1 | Feb 12, 2026 |
| kernel-default-base · sles 15.7 | 6.4.0-150700.53.31.1.150700.17.21.1 | SUSE-SU-2026:0447-1 | Feb 11, 2026 |
| kernel-default-base · sles 16.0 | 6.12.0-160000.26.1.160000.2.7 | SUSE-SU-2026:20599-1 | Feb 27, 2026 |
| kernel-docs · opensuse-leap 15.6 | 6.4.0-150600.23.87.1 | SUSE-SU-2026:0471-1 | Feb 12, 2026 |
| kernel-docs · opensuse-leap 16.0 | 6.12.0-160000.26.1 | OPENSUSE-SU-2026:20287-1 | Feb 27, 2026 |
| kernel-docs · sles 15.6 | 6.4.0-150600.23.87.1 | SUSE-SU-2026:0471-1 | Feb 12, 2026 |
| kernel-docs · sles 15.7 | 6.4.0-150700.53.31.1 | SUSE-SU-2026:0447-1 | Feb 11, 2026 |
| kernel-docs · sles 16.0 | 6.12.0-160000.26.1 | SUSE-SU-2026:20599-1 | Feb 27, 2026 |
| kernel-kvmsmall · opensuse-leap 15.6 | 6.4.0-150600.23.87.1 | SUSE-SU-2026:0471-1 | Feb 12, 2026 |
| kernel-kvmsmall · opensuse-leap 16.0 | 6.12.0-160000.26.1 | OPENSUSE-SU-2026:20287-1 | Feb 27, 2026 |
| kernel-kvmsmall · sles 16.0 | 6.12.0-160000.26.1 | SUSE-SU-2026:20599-1 | Feb 27, 2026 |
| kernel-livepatch-SLE15-SP6_Update_20 · sles 15.6 | 1-150600.13.3.1 | SUSE-SU-2026:0471-1 | Feb 12, 2026 |
| kernel-livepatch-SLE15-SP7-RT_Update_9 · sles 15.7 | 1-150700.1.3.2 | SUSE-SU-2026:0587-1 | Feb 20, 2026 |
| kernel-livepatch-SLE15-SP7_Update_9 · sles 15.7 | 1-150700.15.3.1 | SUSE-SU-2026:0447-1 | Feb 11, 2026 |
| kernel-obs-build · opensuse-leap 15.6 | 6.4.0-150600.23.87.1 | SUSE-SU-2026:0471-1 | Feb 12, 2026 |
| kernel-obs-build · opensuse-leap 16.0 | 6.12.0-160000.26.1 | OPENSUSE-SU-2026:20287-1 | Feb 27, 2026 |
| kernel-obs-build · sles 15.6 | 6.4.0-150600.23.87.1 | SUSE-SU-2026:0471-1 | Feb 12, 2026 |
| kernel-obs-build · sles 15.7 | 6.4.0-150700.53.31.1 | SUSE-SU-2026:0447-1 | Feb 11, 2026 |
| kernel-obs-qa · opensuse-leap 15.6 | 6.4.0-150600.23.87.1 | SUSE-SU-2026:0471-1 | Feb 12, 2026 |
| kernel-obs-qa · opensuse-leap 16.0 | 6.12.0-160000.26.1 | OPENSUSE-SU-2026:20287-1 | Feb 27, 2026 |
| kernel-obs-qa · sles 16.0 | 6.12.0-160000.26.1 | SUSE-SU-2026:20599-1 | Feb 27, 2026 |
| kernel-rt · opensuse-leap 16.0 | 6.12.0-160000.26.1 | OPENSUSE-SU-2026:20287-1 | Feb 27, 2026 |
| kernel-source · opensuse-leap 15.6 | 6.4.0-150600.23.87.1 | SUSE-SU-2026:0471-1 | Feb 12, 2026 |
| kernel-source · opensuse-leap 16.0 | 6.12.0-160000.26.1 | OPENSUSE-SU-2026:20287-1 | Feb 27, 2026 |
| kernel-source · sles 15.6 | 6.4.0-150600.23.87.1 | SUSE-SU-2026:0471-1 | Feb 12, 2026 |
| kernel-source · sles 15.7 | 6.4.0-150700.53.31.1 | SUSE-SU-2026:0447-1 | Feb 11, 2026 |
| kernel-source · sles 16.0 | 6.12.0-160000.26.1 | SUSE-SU-2026:20599-1 | Feb 27, 2026 |
| kernel-source-azure · sles 15.7 | 6.4.0-150700.20.27.1 | SUSE-SU-2026:0472-1 | Feb 12, 2026 |
| kernel-syms · opensuse-leap 15.6 | 6.4.0-150600.23.87.1 | SUSE-SU-2026:0471-1 | Feb 12, 2026 |
| kernel-syms · opensuse-leap 16.0 | 6.12.0-160000.26.1 | OPENSUSE-SU-2026:20287-1 | Feb 27, 2026 |
| kernel-syms · sles 15.6 | 6.4.0-150600.23.87.1 | SUSE-SU-2026:0471-1 | Feb 12, 2026 |
| kernel-syms · sles 15.7 | 6.4.0-150700.53.31.1 | SUSE-SU-2026:0447-1 | Feb 11, 2026 |
| kernel-syms · sles 16.0 | 6.12.0-160000.26.1 | SUSE-SU-2026:20599-1 | Feb 27, 2026 |
| kernel-syms-azure · sles 15.7 | 6.4.0-150700.20.27.1 | SUSE-SU-2026:0472-1 | Feb 12, 2026 |
| kernel-zfcpdump · opensuse-leap 15.6 | 6.4.0-150600.23.87.1 | SUSE-SU-2026:0471-1 | Feb 12, 2026 |
| kernel-zfcpdump · opensuse-leap 16.0 | 6.12.0-160000.26.1 | OPENSUSE-SU-2026:20287-1 | Feb 27, 2026 |
| kernel-zfcpdump · sles 15.7 | 6.4.0-150700.53.31.1 | SUSE-SU-2026:0447-1 | Feb 11, 2026 |
| kernel-zfcpdump · sles 16.0 | 6.12.0-160000.26.1 | SUSE-SU-2026:20599-1 | Feb 27, 2026 |
| linux · Debian 12.15 (bookworm) | 6.1.190-1 | DEBIAN-CVE-2025-40097 | Oct 30, 2025 |
| linux · Debian 13.5 (trixie) | 6.12.63-1 | DEBIAN-CVE-2025-40097 | Oct 30, 2025 |
| linux · Debian 14 | 6.17.6-1 | DEBIAN-CVE-2025-40097 | Oct 30, 2025 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.