CVE-2025-37934: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Fix pointer check in graph_util_parse_link_direction Actually check if the passed pointers are valid, before writing to them. This also fixes a USBAN warning: UBSAN: invalid-load in ../sound/soc/fsl/imx-card.c:687:25 load of value 255 is not a valid value for type '_Bool' This is because playback_only is uninitialized and is not written to, as the playback-only property is absent.

Affected products

• Linux Linux Kernel: from 6.11, before 6.12.28 (fixed in 6.12.28); from 6.13, before 6.14.6 (fixed in 6.14.6); version 6.15 only

Published 2025-05-20. Last modified 2026-06-17.