In the Linux kernel, the following vulnerability has been resolved:
ALSA: hda: Fix possible null-ptr-deref when assigning a stream
While AudioDSP drivers assign streams exclusively of HOST or LINK type, nothing blocks a user to attempt to assign a COUPLED stream. As supplied substream instance may be a stub, what is the case when code-loading, such scenario ends with null-ptr-deref.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade dtb-sprdUpgrade kernel-symsUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-azureUpgrade dtb-armUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade dtb-socionextUpgrade gfs2-kmp-azureUpgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-64kbUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade dtb-xilinxUpgrade dtb-appleUpgrade kernel-default-baseUpgrade gfs2-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade dtb-renesasUpgrade kernel-rt-develUpgrade kernel-64kb-extraUpgrade kernel-debug-develUpgrade dlm-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-debugUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade kernel-rt_debugUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade kernel-default-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-amazonUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amlogicUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-docs-htmlUpgrade dtb-rockchipUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade kernel-default-extraUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-exynosUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade kernel-source-rtUpgrade kernel-source-azureUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-rt-extraUpgrade dtb-marvellUpgrade dtb-lgUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade kernel-devel-azureUpgrade dtb-broadcomUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-rt-vdso | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-1135-awsUpgrade linux-image-4.15.0-228-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-4.15.0-1172-awsUpgrade linux-image-4.4.0-1173-awsUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1165-gcpUpgrade linux-image-4.4.0-258-lowlatencyUpgrade linux-image-4.15.0-1180-azureUpgrade linux-image-4.15.0-1134-oracleUpgrade linux-image-4.15.0-228-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-4.4.0-1136-kvmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1155-kvmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gcpUpgrade linux-image-4.4.0-258-genericUpgrade linux-image-aws | Aug 22, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub