The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
ASoC: SOF: ipc4-pcm: Workaround for crashed firmware on system suspend
When the system is suspended while audio is active, the sof_ipc4_pcm_hw_free() is invoked to reset the pipelines since during suspend the DSP is turned off, streams will be re-started after resume.
If the firmware crashes during while audio is running (or when we reset the stream before suspend) then the sof_ipc4_set_multi_pipeline_state() will fail with IPC error and the state change is interrupted. This will cause misalignment between the kernel and firmware state on next DSP boot resulting errors returned by firmware for IPC messages, eventually failing the audio resume. On stream close the errors are ignored so the kernel state will be corrected on the next DSP boot, so the second boot after the DSP panic.
If sof_ipc4_trigger_pipelines() is called from sof_ipc4_pcm_hw_free() then state parameter is SOF_IPC4_PIPE_RESET and only in this case.
Treat a forced pipeline reset similarly to how we treat a pcm_free by ignoring error on state sending to allow the kernel's state to be consistent with the state the firmware will have after the next boot.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | May 1, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Dec 5, 2024 | May 1, 2024 |
| Suse | — | Upgrade kernel-symsUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-freescaleUpgrade kernel-default-develUpgrade reiserfs-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-default-livepatchUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade dtb-marvellUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade kernel-sourceUpgrade kernel-azure-vdsoUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-qaUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-rtUpgrade dtb-amlogicUpgrade dtb-apmUpgrade dtb-lgUpgrade kernel-azure-develUpgrade dtb-armUpgrade kernel-default-optionalUpgrade kernel-debugUpgrade dtb-sprdUpgrade kernel-defaultUpgrade dtb-allwinnerUpgrade kselftests-kmp-azureUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-rt-develUpgrade kernel-rt_debugUpgrade kernel-default-livepatch-develUpgrade dtb-xilinxUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-debug-develUpgrade kernel-azureUpgrade dtb-mediatekUpgrade dtb-alteraUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-socionextUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade kernel-develUpgrade dtb-renesasUpgrade dtb-appleUpgrade kernel-debug-vdsoUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade kernel-azure-optionalUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade dtb-amd | Jun 24, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | May 1, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub