In the Linux kernel, the following vulnerability has been resolved:
ALSA: hda: Do not unset preset when cleaning up codec
Several functions that take part in codec's initialization and removal are re-used by ASoC codec drivers implementations. Drivers mimic the behavior of hda_codec_driver_probe/remove() found in sound/pci/hda/hda_bind.c with their component->probe/remove() instead.
One of the reasons for that is the expectation of snd_hda_codec_device_new() to receive a valid pointer to an instance of struct snd_card. This expectation can be met only once sound card components probing commences.
As ASoC sound card may be unbound without codec device being actually removed from the system, unsetting ->preset in snd_hda_codec_cleanup_for_unbind() interferes with module unload -> load scenario causing null-ptr-deref. Preset is assigned only once, during device/driver matching whereas ASoC codec driver's module reloading may occur several times throughout the lifetime of an audio stack.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Oct 9, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade gfs2-kmp-rtUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade kernel-source-azureUpgrade dtb-allwinnerUpgrade dtb-apmUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade kernel-debug-develUpgrade kernel-default-livepatch-develUpgrade kernel-zfcpdumpUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade kernel-default-extraUpgrade dtb-socionextUpgrade kernel-rt-livepatch-develUpgrade kernel-debugUpgrade ocfs2-kmp-azureUpgrade kernel-default-develUpgrade dlm-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-default-livepatchUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-rtUpgrade dtb-lgUpgrade kernel-rt-optionalUpgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-rt_debugUpgrade kernel-rt_debug-vdsoUpgrade dtb-freescaleUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-alteraUpgrade dtb-hisiliconUpgrade kernel-azure-vdsoUpgrade kernel-default-baseUpgrade kernel-64kb-optionalUpgrade dtb-renesasUpgrade kselftests-kmp-rtUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade dtb-amdUpgrade dtb-marvellUpgrade kernel-64kb-develUpgrade cluster-md-kmp-rtUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade kernel-develUpgrade dtb-xilinxUpgrade kernel-rt-vdsoUpgrade kernel-rt-develUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade dlm-kmp-rtUpgrade kernel-sourceUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmallUpgrade dtb-sprdUpgrade kernel-azure-livepatch-develUpgrade dtb-mediatekUpgrade kselftests-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade kernel-devel-rtUpgrade kernel-rt-extraUpgrade kernel-docsUpgrade kernel-azure-develUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-default-vdsoUpgrade dlm-kmp-azureUpgrade kernel-macrosUpgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade dtb-armUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatchUpgrade kernel-syms-azureUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-default | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-gkeopUpgrade linux-gcp-5.15Upgrade linux-gkeop-5.15Upgrade linux-lowlatencyUpgrade linux-kvmUpgrade linux-azure-fde-5.15Upgrade linux-intel-iotgUpgrade linux-intel-iotg-5.15Upgrade linux-azureUpgrade linux-azure-5.15Upgrade linux-oracleUpgrade linux-ibmUpgrade linux-riscv-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-oracle-5.15Upgrade linux-gcpUpgrade linux-nvidiaUpgrade linux-realtimeUpgrade linuxUpgrade linux-nvidia-tegra-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-hwe-5.15Upgrade linux-raspiUpgrade linux-bluefieldUpgrade linux-aws-5.15Upgrade linux-awsUpgrade linux-azure-fdeUpgrade linux-gke | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub