In the Linux kernel, the following vulnerability has been resolved:
ASoC: qcom: Fix uninitialized pointer dmactl
In the case where __lpass_get_dmactl_handle is called and the driver id dai_id is invalid the pointer dmactl is not being assigned a value, and dmactl contains a garbage value since it has not been initialized and so the null check may not work. Fix this to initialize dmactl to NULL. One could argue that modern compilers will set this to zero, but it is useful to keep this initialized as per the same way in functions __lpass_platform_codec_intf_init and lpass_cdc_dma_daiops_hw_params.
Cleans up clang scan build warning: sound/soc/qcom/lpass-cdc-dma.c:275:7: warning: Branch condition evaluates to a garbage value [core.uninitialized.Branch]
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Apr 4, 2024 |
| Suse | — | Upgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-syms-azure | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | Apr 4, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub