In the Linux kernel, the following vulnerability has been resolved:
ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
When using kernel with the following extra config,
- CONFIG_KASAN=y - CONFIG_KASAN_GENERIC=y - CONFIG_KASAN_INLINE=y - CONFIG_KASAN_VMALLOC=y - CONFIG_FRAME_WARN=4096
kernel detects that snd_pcm_suspend_all() access a freed 'snd_soc_pcm_runtime' object when the system is suspended, which leads to a use-after-free bug:
[ 52.047746] BUG: KASAN: use-after-free in snd_pcm_suspend_all+0x1a8/0x270 [ 52.047765] Read of size 1 at addr ffff0000b9434d50 by task systemd-sleep/2330
[ 52.047785] Call trace: [ 52.047787] dump_backtrace+0x0/0x3c0 [ 52.047794] show_stack+0x34/0x50 [ 52.047797] dump_stack_lvl+0x68/0x8c [ 52.047802] print_address_description.constprop.0+0x74/0x2c0 [ 52.047809] kasan_report+0x210/0x230 [ 52.047815] __asan_report_load1_noabort+0x3c/0x50 [ 52.047820] snd_pcm_suspend_all+0x1a8/0x270 [ 52.047824] snd_soc_suspend+0x19c/0x4e0
The snd_pcm_sync_stop() has a NULL check on 'substream->runtime' before making any access. So we need to always set 'substream->runtime' to NULL everytime we kfree() it.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-livepatch-5.15.167-112.165Upgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.226-214.879Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64 | Oct 3, 2024 | Sep 18, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | Sep 18, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 21, 2024 | Sep 18, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 18, 2024 |
| Suse | — | Upgrade kernel-azure-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-docsUpgrade kernel-rt_debug-vdsoUpgrade dtb-socionextUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-develUpgrade dtb-renesasUpgrade dlm-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-azureUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-default-livepatch-develUpgrade kernel-64kbUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-rtUpgrade reiserfs-kmp-rtUpgrade dtb-appleUpgrade kernel-syms-rtUpgrade kernel-debugUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-azure-extraUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade kernel-rt-livepatch-develUpgrade dtb-broadcomUpgrade kernel-rt_debugUpgrade cluster-md-kmp-64kbUpgrade kernel-default-extraUpgrade dtb-freescaleUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade dtb-sprdUpgrade kernel-64kb-optionalUpgrade kernel-azure-develUpgrade dtb-allwinnerUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade dtb-alteraUpgrade kernel-zfcpdumpUpgrade dtb-nvidiaUpgrade ocfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-rt-extraUpgrade ocfs2-kmp-azureUpgrade dtb-qcomUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade kernel-rt-develUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade kernel-rt-livepatchUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade kernel-sourceUpgrade kernel-azure-livepatch-develUpgrade dtb-armUpgrade kernel-symsUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-azure | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeUpgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-bluefieldUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1044-iotUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1075-azureUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-oemUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-125-genericUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-oem-24.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-intelUpgrade linux-image-5.4.0-1140-azureUpgrade linux-image-oem-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1135-awsUpgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-gke-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1139-azureUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-raspi2Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-kvmUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-200-genericUpgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-raspiUpgrade linux-image-gkeop-5.4Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1016-raspi | Nov 4, 2024 | Sep 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub