[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-38438":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T08:53:30.047Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":54,"related":55,"reserved_at":9,"published_at":60,"modified_at":61,"state":62,"summary":63,"references_raw":72,"kevs":87,"epss":88,"epss_history":91,"metrics":356,"affected":362},"CVE-2025-38438","In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak.\n\nsof_pdata->tplg_filename can have address allocated by kstrdup()\nand can be overwritten. Memory leak was detected with kmemleak:\n\nunreferenced object 0xffff88812391ff60 (size 16):\n  comm \"kworker/4:1\", pid 161, jiffies 4294802931\n  hex dump (first 16 bytes):\n    73 6f 66 2d 68 64 61 2d 67 65 6e 65 72 69 63 00  sof-hda-generic.\n  backtrace (crc 4bf1675c):\n    __kmalloc_node_track_caller_noprof+0x49c/0x6b0\n    kstrdup+0x46/0xc0\n    hda_machine_select.cold+0x1de/0x12cf [snd_sof_intel_hda_generic]\n    sof_init_environment+0x16f/0xb50 [snd_sof]\n    sof_probe_continue+0x45/0x7c0 [snd_sof]\n    sof_probe_work+0x1e/0x40 [snd_sof]\n    process_one_work+0x894/0x14b0\n    worker_thread+0x5e5/0xfb0\n    kthread+0x39d/0x760\n    ret_from_fork+0x31/0x70\n    ret_from_fork_asm+0x1a/0x30",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-401","Missing Release of Memory after Effective Lifetime","The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.","weakness","Draft","Variant","Medium",[],[],[],[],[24,26,28,30,32,34,36,38,40,42,44,46,48,50,52],{"_key":25},"DSA-5975-1",{"_key":27},"SUSE-SU-2025:21074-1",{"_key":29},"SUSE-SU-2025:21139-1",{"_key":31},"SUSE-SU-2025:21179-1",{"_key":33},"OPENSUSE-SU-2025:20081-1",{"_key":35},"DEBIAN-CVE-2025-38438",{"_key":37},"USN-7934-1",{"_key":39},"RHSA-2025:20095",{"_key":41},"RHSA-2025:20518",{"_key":43},"UBUNTU-CVE-2025-38438",{"_key":45},"USN-7879-1",{"_key":47},"USN-7879-2",{"_key":49},"USN-7879-3",{"_key":51},"USN-7879-4",{"_key":53},"USN-7880-1",[],[56,57,58,59],{"_key":27},{"_key":29},{"_key":31},{"_key":33},"2025-07-25T15:27:17.917Z","2026-05-11T21:27:59.571Z","Analyzed",{"cisa_kev":64,"cisa_ransomware":64,"cisa_vendor":9,"epss_severity":65,"epss_score":66,"severity":67,"severity_score":68,"severity_version":69,"severity_source":70,"severity_vector":71,"severity_status":62},false,"low",0.00049,"medium",5.5,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",[73,79,83],{"url":74,"sources":75,"tags":77},"https://git.kernel.org/stable/c/68397fda2caa90e99a7c0bcb2cf604e42ef3b91f",[76,70],"cve.org",[78],"Patch",{"url":80,"sources":81,"tags":82},"https://git.kernel.org/stable/c/58ecf51af12cb32b890858b52b2c34e80590c74a",[76,70],[78],{"url":84,"sources":85,"tags":86},"https://git.kernel.org/stable/c/6c038b58a2dc5a008c7e7a1297f5aaa4deaaaa7e",[76,70],[78],[],{"date":89,"score":66,"percentile":90},"2026-06-03",0.15598,[92,96,98,101,104,106,109,112,115,118,121,124,127,130,133,136,139,143,146,149,151,155,158,161,164,167,170,173,176,179,182,185,188,191,194,197,200,203,206,209,212,215,218,221,224,227,230,233,237,241,244,247,250,253,256,259,261,264,267,270,274,277,280,283,286,289,292,295,298,301,304,307,309,311,314,317,320,323,326,329,332,334,337,340,342,344,346,348,350,353],{"date":93,"score":94,"percentile":95},"2025-11-04",0.00025,0.05442,{"date":97,"score":94,"percentile":95},"2025-11-05",{"date":99,"score":94,"percentile":100},"2025-11-06",0.05561,{"date":102,"score":94,"percentile":103},"2025-11-07",0.05571,{"date":105,"score":94,"percentile":100},"2025-11-08",{"date":107,"score":94,"percentile":108},"2025-11-09",0.05555,{"date":110,"score":94,"percentile":111},"2025-11-10",0.05535,{"date":113,"score":94,"percentile":114},"2025-11-11",0.05568,{"date":116,"score":94,"percentile":117},"2025-11-12",0.05601,{"date":119,"score":94,"percentile":120},"2025-11-13",0.05621,{"date":122,"score":94,"percentile":123},"2025-11-14",0.05658,{"date":125,"score":94,"percentile":126},"2025-11-15",0.05684,{"date":128,"score":94,"percentile":129},"2025-11-16",0.0569,{"date":131,"score":94,"percentile":132},"2025-11-17",0.05683,{"date":134,"score":94,"percentile":135},"2025-11-18",0.0336,{"date":137,"score":94,"percentile":138},"2025-11-19",0.03412,{"date":140,"score":141,"percentile":142},"2025-11-20",0.00017,0.02119,{"date":144,"score":141,"percentile":145},"2025-11-21",0.03303,{"date":147,"score":141,"percentile":148},"2025-11-22",0.03306,{"date":150,"score":141,"percentile":145},"2025-11-23",{"date":152,"score":153,"percentile":154},"2025-11-24",0.00022,0.04871,{"date":156,"score":153,"percentile":157},"2025-11-25",0.04883,{"date":159,"score":153,"percentile":160},"2025-11-26",0.04919,{"date":162,"score":153,"percentile":163},"2025-11-27",0.04937,{"date":165,"score":153,"percentile":166},"2025-11-28",0.04923,{"date":168,"score":153,"percentile":169},"2025-11-29",0.04972,{"date":171,"score":153,"percentile":172},"2025-11-30",0.04969,{"date":174,"score":153,"percentile":175},"2025-12-01",0.05063,{"date":177,"score":153,"percentile":178},"2025-12-02",0.05078,{"date":180,"score":153,"percentile":181},"2025-12-03",0.05103,{"date":183,"score":153,"percentile":184},"2025-12-04",0.05051,{"date":186,"score":153,"percentile":187},"2025-12-05",0.05112,{"date":189,"score":153,"percentile":190},"2025-12-06",0.05123,{"date":192,"score":153,"percentile":193},"2025-12-07",0.05124,{"date":195,"score":153,"percentile":196},"2025-12-08",0.05127,{"date":198,"score":153,"percentile":199},"2025-12-09",0.0517,{"date":201,"score":153,"percentile":202},"2025-12-10",0.05232,{"date":204,"score":153,"percentile":205},"2025-12-11",0.05224,{"date":207,"score":153,"percentile":208},"2025-12-12",0.0525,{"date":210,"score":153,"percentile":211},"2025-12-13",0.05295,{"date":213,"score":153,"percentile":214},"2025-12-14",0.05282,{"date":216,"score":153,"percentile":217},"2025-12-15",0.05256,{"date":219,"score":153,"percentile":220},"2025-12-16",0.0526,{"date":222,"score":153,"percentile":223},"2025-12-17",0.05323,{"date":225,"score":153,"percentile":226},"2025-12-18",0.05357,{"date":228,"score":153,"percentile":229},"2025-12-19",0.05343,{"date":231,"score":153,"percentile":232},"2025-12-20",0.05346,{"date":234,"score":235,"percentile":236},"2025-12-21",0.00011,0.01003,{"date":238,"score":239,"percentile":240},"2025-12-22",0.0001,0.00921,{"date":242,"score":239,"percentile":243},"2025-12-23",0.00917,{"date":245,"score":239,"percentile":246},"2025-12-24",0.00919,{"date":248,"score":239,"percentile":249},"2025-12-25",0.00923,{"date":251,"score":239,"percentile":252},"2025-12-26",0.00925,{"date":254,"score":239,"percentile":255},"2025-12-27",0.00929,{"date":257,"score":239,"percentile":258},"2025-12-28",0.00924,{"date":260,"score":239,"percentile":240},"2025-12-29",{"date":262,"score":239,"percentile":263},"2025-12-30",0.00918,{"date":265,"score":239,"percentile":266},"2025-12-31",0.00914,{"date":268,"score":239,"percentile":269},"2026-01-01",0.00937,{"date":271,"score":272,"percentile":273},"2026-01-02",0.00012,0.0139,{"date":275,"score":272,"percentile":276},"2026-01-03",0.01393,{"date":278,"score":272,"percentile":279},"2026-01-04",0.01362,{"date":281,"score":272,"percentile":282},"2026-01-05",0.0137,{"date":284,"score":272,"percentile":285},"2026-01-06",0.01365,{"date":287,"score":272,"percentile":288},"2026-01-07",0.01369,{"date":290,"score":272,"percentile":291},"2026-01-08",0.01385,{"date":293,"score":272,"percentile":294},"2026-01-09",0.01401,{"date":296,"score":272,"percentile":297},"2026-01-10",0.01411,{"date":299,"score":272,"percentile":300},"2026-01-11",0.01409,{"date":302,"score":272,"percentile":303},"2026-01-12",0.01398,{"date":305,"score":272,"percentile":306},"2026-01-13",0.01396,{"date":308,"score":272,"percentile":303},"2026-01-14",{"date":310,"score":272,"percentile":300},"2026-01-15",{"date":312,"score":272,"percentile":313},"2026-01-16",0.01418,{"date":315,"score":272,"percentile":316},"2026-01-17",0.01421,{"date":318,"score":272,"percentile":319},"2026-01-18",0.01434,{"date":321,"score":272,"percentile":322},"2026-01-19",0.01423,{"date":324,"score":272,"percentile":325},"2026-01-20",0.0141,{"date":327,"score":272,"percentile":328},"2026-01-21",0.01404,{"date":330,"score":272,"percentile":331},"2026-01-22",0.01407,{"date":333,"score":272,"percentile":316},"2026-01-23",{"date":335,"score":272,"percentile":336},"2026-01-24",0.01427,{"date":338,"score":272,"percentile":339},"2026-01-25",0.01426,{"date":341,"score":272,"percentile":322},"2026-01-26",{"date":343,"score":272,"percentile":300},"2026-01-27",{"date":345,"score":272,"percentile":331},"2026-01-28",{"date":347,"score":272,"percentile":313},"2026-01-29",{"date":349,"score":272,"percentile":322},"2026-01-30",{"date":351,"score":272,"percentile":352},"2026-01-31",0.01438,{"date":354,"score":272,"percentile":355},"2026-02-01",0.0146,[357],{"source":70,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":358,"cvss_v4_0":9},{"baseScore":68,"baseSeverity":359,"vectorString":71,"impactScore":360,"exploitabilityScore":361},"MEDIUM",6,4.6,[363,383],{"ecosystem":9,"name":364,"vendor":365,"product":365,"cpe_part":366,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":367},"Linux","linux","a",[368,375,378,381],{"version":369,"is_range":370,"range_type":76,"version_start":371,"version_start_type":372,"version_end":373,"version_end_type":374,"fixed_in":9},">= dd96daca6c83ecaf37f38ff49d8d174bbff576b4, \u003C 68397fda2caa90e99a7c0bcb2cf604e42ef3b91f",true,"dd96daca6c83ecaf37f38ff49d8d174bbff576b4","including","68397fda2caa90e99a7c0bcb2cf604e42ef3b91f","excluding",{"version":376,"is_range":370,"range_type":76,"version_start":371,"version_start_type":372,"version_end":377,"version_end_type":374,"fixed_in":9},">= dd96daca6c83ecaf37f38ff49d8d174bbff576b4, \u003C 58ecf51af12cb32b890858b52b2c34e80590c74a","58ecf51af12cb32b890858b52b2c34e80590c74a",{"version":379,"is_range":370,"range_type":76,"version_start":371,"version_start_type":372,"version_end":380,"version_end_type":374,"fixed_in":9},">= dd96daca6c83ecaf37f38ff49d8d174bbff576b4, \u003C 6c038b58a2dc5a008c7e7a1297f5aaa4deaaaa7e","6c038b58a2dc5a008c7e7a1297f5aaa4deaaaa7e",{"version":382,"is_range":64,"range_type":76,"version_start":382,"version_start_type":372,"version_end":382,"version_end_type":372,"fixed_in":9},"5.2",{"ecosystem":9,"name":384,"vendor":365,"product":385,"cpe_part":386,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":387},"linux kernel","linux_kernel","o",[388,392,396,398,400],{"version":389,"is_range":370,"range_type":390,"version_start":382,"version_start_type":372,"version_end":391,"version_end_type":374,"fixed_in":9},"gte5.2_lt6.12.39","cpe","6.12.39",{"version":393,"is_range":370,"range_type":390,"version_start":394,"version_start_type":372,"version_end":395,"version_end_type":374,"fixed_in":9},"gte6.13_lt6.15.7","6.13","6.15.7",{"version":397,"is_range":64,"range_type":390,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.16:rc1",{"version":399,"is_range":64,"range_type":390,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.16:rc2",{"version":401,"is_range":64,"range_type":390,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.16:rc3"]