# CVE-2025-39892: linux: In the Linux kernel, the following vulnerability has been resolved:  ASoC: soc-core: care NULL dirver name on snd_soc...

CVE-2025-39892 is fixed in linux on 1 platform by DEBIAN-CVE-2025-39892 (version 6.16.6-1), released October 1, 2025. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2025-39892
- Priority: Routine
- CVSS: 5.5 (medium)
- EPSS: 0.0013
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Oct 1, 2025

## Description

In the Linux kernel, the following vulnerability has been resolved:  ASoC: soc-core: care NULL dirver name on snd_soc_lookup_component_nolocked()  soc-generic-dmaengine-pcm.c uses same dev for both CPU and Platform. In such case, CPU component driver might not have driver->name, then snd_soc_lookup_component_nolocked() will be NULL pointer access error. Care NULL driver name.  	Call trace: 	 strcmp from snd_soc_lookup_component_nolocked+0x64/0xa4 	 snd_soc_lookup_component_nolocked from snd_soc_unregister_component_by_driver+0x2c/0x44 	 snd_soc_unregister_component_by_driver from snd_dmaengine_pcm_unregister+0x28/0x64 	 snd_dmaengine_pcm_unregister from devres_release_all+0x98/0xfc 	 devres_release_all from device_unbind_cleanup+0xc/0x60 	 device_unbind_cleanup from really_probe+0x220/0x2c8 	 really_probe from __driver_probe_device+0x88/0x1a0 	 __driver_probe_device from driver_probe_device+0x30/0x110 	driver_probe_device from __driver_attach+0x90/0x178 	__driver_attach from bus_for_each_dev+0x7c/0xcc 	bus_for_each_dev from bus_add_driver+0xcc/0x1ec 	bus_add_driver from driver_register+0x80/0x11c 	driver_register from do_one_initcall+0x58/0x23c 	do_one_initcall from kernel_init_freeable+0x198/0x1f4 	kernel_init_freeable from kernel_init+0x1c/0x12c 	kernel_init from ret_from_fork+0x14/0x28

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | linux Debian 14 | 6.16.6-1 | [DEBIAN-CVE-2025-39892](https://patchblox.com/security/data/fix/linux/debian-cve-2025-39892.md) | Oct 1, 2025 |

---

Data as of 2026-11-08T19:12:23Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.