Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Back

CVE-2025-40344

ASoC: Intel: avs: Disable periods-elapsed work when closing PCM

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Disable periods-elapsed work when closing PCM avs_dai_fe_shutdown() handles the shutdown procedure for HOST HDAudio stream while period-elapsed work services its IRQs. As the former frees the DAI's private context, these two operations shall be synchronized to avoid slab-use-after-free or worse errors.

Timeline

  1. ID reserved

    By Linux

  2. · 8 months later

    Published

  3. · 10 months later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2025-40344, by who scored it
Scored byCVSSScoreVector
LinuxCNA (assigner)3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Deferred3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.19% · top 91% of all CVEs (11 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: total
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.

Affected products

  • Linux · Linux

    • affected 0dbb186c3510cad4e9f443e801bf2e6ab5770c00 – < ca6d2b7aca778afbf8c0c4b330d10cb228c14052
    • affected 0dbb186c3510cad4e9f443e801bf2e6ab5770c00 – < b41fca4aa60be896ba8a81b57aac5dcc6eee66c0
    • affected 0dbb186c3510cad4e9f443e801bf2e6ab5770c00 – < 845f716dc5f354c719f6fda35048b6c2eca99331
    • affected 31087af37d6b1586b76d4acf3e0c1634a4617ba6
    • affected 6.11.9 – < 6.12

  • Linux · Linux

    • affected 6.12
    • unaffected < 6.12
    • unaffected 6.12.58 – ≤ 6.12.*
    • unaffected 6.17.8 – ≤ 6.17.*
    • unaffected 6.18 – ≤ *

References

References3

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2025-40344 badge
[![CVE-2025-40344](https://cveledger.app/badge/CVE-2025-40344.svg)](https://cveledger.app/cve/CVE-2025-40344)

Record last updated .