In the Linux kernel, the following vulnerability has been resolved:
ASoC: qcom: Fix uninitialized pointer dmactl
In the case where __lpass_get_dmactl_handle is called and the driver id dai_id is invalid the pointer dmactl is not being assigned a value, and dmactl contains a garbage value since it has not been initialized and so the null check may not work. Fix this to initialize dmactl to NULL. One could argue that modern compilers will set this to zero, but it is useful to keep this initialized as per the same way in functions __lpass_platform_codec_intf_init and lpass_cdc_dma_daiops_hw_params.
Cleans up clang scan build warning: sound/soc/qcom/lpass-cdc-dma.c:275:7: warning: Branch condition evaluates to a garbage value [core.uninitialized.Branch]
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Apr 4, 2024 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-defaultUpgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade kernel-azure-vdsoUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-kvmsmallUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-obs-qa | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | Apr 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub