CVE-2025-37793 ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe()

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Intel ASoC and cpufreq Null Pointer Dereference Fixes Announced Microsoft has published information regarding two vulnerabilities affecting Intel components. CVE-2025-37793 pertains to a null pointer dereference in the ASoC avs_component_probe function, while CVE-2025-37830 addresses a similar issue in the cpufreq scmi_cpufreq_get_rate function. Both vulnerabilities could potentially impact system stability and performance. 2 sources 41