In the Linux kernel, the following vulnerability has been resolved:
ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup
Use the control private_free callback to free the associated data block. This ensures that the memory won't leak, whatever way the control gets destroyed.
The original implementation didn't actually remove the ALSA controls in hda_cs_dsp_control_remove(). It only freed the internal tracking structure. This meant it was possible to remove/unload the amp driver while leaving its ALSA controls still present in the soundcard. Obviously attempting to access them could cause segfaults or at least dereferencing stale pointers.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 21, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 5, 2024 | Jun 21, 2024 |
| Suse | — | Upgrade kernel-azure-develUpgrade kernel-debug-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-develUpgrade dtb-socionextUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-docsUpgrade kernel-syms-azureUpgrade dlm-kmp-64kbUpgrade kernel-docs-htmlUpgrade dtb-qcomUpgrade kernel-obs-qaUpgrade dtb-freescaleUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-macrosUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-defaultUpgrade dtb-exynosUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-armUpgrade kernel-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-marvellUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-azureUpgrade kernel-rt_debugUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade kernel-symsUpgrade dtb-lgUpgrade kernel-64kbUpgrade kernel-sourceUpgrade dtb-broadcomUpgrade kernel-syms-rtUpgrade kernel-default-extraUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-devel-azureUpgrade dtb-rockchipUpgrade kernel-azure-vdsoUpgrade dtb-apmUpgrade kernel-source-rtUpgrade kernel-develUpgrade kernel-default-livepatchUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade kernel-debug-vdsoUpgrade dlm-kmp-rtUpgrade dtb-alteraUpgrade kernel-rt-extraUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade kernel-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-livepatchUpgrade dtb-caviumUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-debugUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-vanillaUpgrade kselftests-kmp-rtUpgrade dtb-appleUpgrade dtb-xilinxUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-debug-develUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-azure-optionalUpgrade kernel-azure-extraUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinner | Jul 10, 2024 | Jun 21, 2024 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1012-oracle | Sep 12, 2024 | Jun 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jun 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub