CVE-2025-21870 | Linux Kernel up to 6.12.16/6.13.4 ipc4-topology sof_ipc4_prepare_copier_module null pointer dereference (Nessus ID 234058 / WID-SEC-2025-0649)
A vulnerability described as critical has been identified in Linux Kernel up to 6.12.16/6.13.4. This affects the function sof_ipc4_prepare_copier_module of the component ipc4-topology. Such manipulation leads to null pointer dereference.
This vulnerability is listed as CVE-2025-21870. The attack must be carried out from within the local network. There is no available exploit.
Upgrading the affected component is recommended.