What’s Vulnerable › Vulnerabilities

CVE-2025-40121: ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-11-12 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping When an invalid value is passed via quirk option, currently bytcr_rt5640 driver just ignores and leaves as is, which may lead to unepxected results like OOB access. This patch adds the sanity check and corrects the input mapping to the certain default value if an invalid value is passed.

Affected products

• Linux kernel: 4.18 — fixed in 6.18

How to fix

Upgrade to a fixed version: Linux kernel 6.18. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2204e582b4eea872e1e7a5c90edcb84b928c68b0
• https://git.kernel.org/stable/c/4336efb59ef364e691ef829a73d9dbd4d5ed7c7b
• https://git.kernel.org/stable/c/64a36a7032082b4c330ce081acb6efb99246020e
• https://git.kernel.org/stable/c/95e29db33b5f73218ae08ebb48c61c9a8d28e2ff
• https://git.kernel.org/stable/c/bff827b0d507e52b23efab9f67c232a4f037ab2c
• https://git.kernel.org/stable/c/c60f269c123210a6846d6d1367de0eaa402c10b0
• https://git.kernel.org/stable/c/f197894de2f4ef46c7d53827d9df294b75c35e13
• https://git.kernel.org/stable/c/fdf99978a6480e14405212472b6c747e0fa43bed

Get alerted when CVE-2025-40121 or the next vulnerability affects your stack