CVE-2025-40098

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state() Return value of a function acpi_evaluate_dsm() is dereferenced without checking for NULL, but it is usually checked for this function. acpi_evaluate_dsm() may return NULL, when acpi_evaluate_object() returns acpi_status other than ACPI_SUCCESS, so add a check to prevent the crach. Found by Linux Verification Center (linuxtesting.org) with SVACE.

EPSS

0.2% chance of exploitation in the next 30 days; higher than 9% of CVEs (scores of 2026-10-25)

Published

2025-10-30

Modified

2026-10-19

Record from

the NVD, synced 2026-10-21

References

• https://git.kernel.org/stable/c/19129a365d2bd019fb60662b36b2655931997f12
• https://git.kernel.org/stable/c/8527bbb33936340525a3504a00932b2f8fd75754
• https://git.kernel.org/stable/c/b518386db2b993d786c431caa9f46ce063c5cb05

Check your stackJSON