CVE-2025-40344: 
Linux Kernel vulnerability analysis and mitigation

CVE-2025-40344 is a use-after-free vulnerability in the Linux kernel's ASoC (Audio System on Chip) Intel AVS (Audio/Video Subsystem) driver. The flaw exists in the avs_dai_fe_shutdown() function, which handles the shutdown of HOST HDAudio streams, and can race with the period-elapsed work that services IRQs — leading to slab-use-after-free or worse memory corruption errors. It was published on December 9, 2025, and affects Linux kernel versions from commit 0dbb186c3510 up to the patched stable releases. The EPSS score is approximately 0.017% (very low), and no CVSS base score has been formally assigned (Feedly, ENISA EUVD).

The root cause is a race condition (CWE-416: Use After Free) between avs_dai_fe_shutdown(), which frees the DAI's private context, and the period-elapsed work queue that continues to service HDAudio stream IRQs after shutdown is initiated. Because these two code paths are not properly synchronized, the work queue can access already-freed slab memory, resulting in a slab-use-after-free condition. The fix involves disabling the period-elapsed work before freeing the private context in the shutdown path, ensuring the two operations are properly serialized. Patches were applied to multiple stable kernel branches (ENISA EUVD, Kernel Git).

Successful triggering of this race condition can result in kernel memory corruption via slab-use-after-free, which may lead to a system crash (denial of service) or, in more severe scenarios, potential privilege escalation if an attacker can control the freed memory contents. The vulnerability is local in nature, requiring the ability to open and close PCM audio devices on systems using Intel AVS HDAudio hardware. The impact is primarily on availability (kernel panic/crash), with a secondary risk to integrity and confidentiality if memory corruption is exploitable beyond a crash (Feedly, ENISA EUVD).

The Linux kernel maintainers have released patches for multiple stable branches. Fixed versions include kernel 6.12.58, 6.17.8, and 6.18, with patch commits ca6d2b7aca778afbf8c0c4b330d10cb228c14052, b41fca4aa60be896ba8a81b57aac5dcc6eee66c0, and 845f716dc5f354c719f6fda35048b6c2eca99331 for the respective branches. Users should update to a patched kernel version as soon as possible. As a temporary workaround, systems that do not use Intel AVS HDAudio hardware can unload or blacklist the snd_soc_avs kernel module to eliminate exposure (ENISA EUVD, Kernel Git).