Upstream information

CVE-2025-40121 at MITRE

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping

When an invalid value is passed via quirk option, currently
bytcr_rt5640 driver just ignores and leaves as is, which may lead to
unepxected results like OOB access.

This patch adds the sanity check and corrects the input mapping to the
certain default value if an invalid value is passed.

SUSE information

Overall state of this security issue: Does not affect SUSE products

SUSE Bugzilla entry: 1253367 [NEW]

No SUSE Security Announcements cross referenced.

SUSE Timeline for this CVE

CVE page created: Wed Nov 12 20:29:19 2025
CVE page last modified: Wed Nov 12 20:29:19 2025