SECUFOCUSNOW
Home›CVE index›CVE-2025-40317
Review reviewHigh

CVE-2025-40317

Linux

In the Linux kernel, the following vulnerability has been resolved: regmap: slimbus: fix bus_context pointer in regmap init calls Commit 4e65bda8273c ("ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data()") revealed the problem in the slimbus regmap. That commit breaks audio playback, for instance, on sdm845 Thundercomm Dragonboard 845c board: Unable to handle kernel paging request at virtual address ffff8000847cbad4 ... CPU: 5 UID: 0 PID: 776 Comm: aplay Not tainted 6.18.0-rc1-00028-g7ea30958b305 #11 PREEMPT Hardware name: Thundercomm Dragonboard 845c (DT) ... Call trace: slim_x...

CVSS
7.8
EPSS
-
- percentile
CISA KEV
Not listed
Published
2025.12.08
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: regmap: slimbus: fix bus_context pointer in regmap init calls Commit 4e65bda8273c ("ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data()") revealed the problem in the slimbus regmap. That commit breaks audio playback, for instance, on sdm845 Thundercomm Dragonboard 845c board: Unable to handle kernel paging request at virtual address ffff8000847cbad4 ... CPU: 5 UID: 0 PID: 776 Comm: aplay Not tainted 6.18.0-rc1-00028-g7ea30958b305 #11 PREEMPT Hardware name: Thundercomm Dragonboard 845c (DT) ... Call trace: slim_x...

Affected product and versions

Product
Linux
Affected versions
>= 7d6f7fb053ad543da74119df3c4cd7bb46220471 < c0f05129e5734ff3fd14b2c242709314d9ca5433, >= 7d6f7fb053ad543da74119df3c4cd7bb46220471 < 02d3041caaa3fe4dd69e5a8afd1ac6b918ddc6a1, >= 7d6f7fb053ad543da74119df3c4cd7bb46220471 < d979639f099c6e51f06ce4dd8d8e56364d6c17ba, >= 7d6f7fb053ad543da74119df3c4cd7bb46220471 < 8143e4075d131c528540417a51966f6697be14eb, >= 7d6f7fb053ad543da74119df3c4cd7bb46220471 < 2664bfd8969d1c43dcbe3ea313f130dfa6b74f4c, >= 7d6f7fb053ad543da74119df3c4cd7bb46220471 < a16e92f8d7dc7371e68f17a9926cb92d2244be7b, >= 7d6f7fb053ad543da74119df3c4cd7bb46220471 < b65f3303349eaee333e47d2a99045aa12fa0c3a7, >= 7d6f7fb053ad543da74119df3c4cd7bb46220471 < 434f7349a1f00618a620b316f091bd13a12bc8d2, >= 4.16
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
Not available