In the Linux kernel, the following vulnerability has been resolved:
ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
When using kernel with the following extra config,
- CONFIG_KASAN=y - CONFIG_KASAN_GENERIC=y - CONFIG_KASAN_INLINE=y - CONFIG_KASAN_VMALLOC=y - CONFIG_FRAME_WARN=4096
kernel detects that snd_pcm_suspend_all() access a freed 'snd_soc_pcm_runtime' object when the system is suspended, which leads to a use-after-free bug:
[ 52.047746] BUG: KASAN: use-after-free in snd_pcm_suspend_all+0x1a8/0x270 [ 52.047765] Read of size 1 at addr ffff0000b9434d50 by task systemd-sleep/2330
[ 52.047785] Call trace: [ 52.047787] dump_backtrace+0x0/0x3c0 [ 52.047794] show_stack+0x34/0x50 [ 52.047797] dump_stack_lvl+0x68/0x8c [ 52.047802] print_address_description.constprop.0+0x74/0x2c0 [ 52.047809] kasan_report+0x210/0x230 [ 52.047815] __asan_report_load1_noabort+0x3c/0x50 [ 52.047820] snd_pcm_suspend_all+0x1a8/0x270 [ 52.047824] snd_soc_suspend+0x19c/0x4e0
The snd_pcm_sync_stop() has a NULL check on 'substream->runtime' before making any access. So we need to always set 'substream->runtime' to NULL everytime we kfree() it.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.226-214.879Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade bpftoolUpgrade kernel-livepatch-5.15.167-112.165Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-devel | Oct 3, 2024 | Sep 18, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | Sep 18, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 21, 2024 | Sep 18, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 18, 2024 |
| Suse | — | Upgrade dtb-alteraUpgrade dtb-caviumUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade dtb-nvidiaUpgrade kernel-rtUpgrade kernel-syms-azureUpgrade ocfs2-kmp-rtUpgrade kernel-rt-extraUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-default-vdsoUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-rt-livepatchUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade cluster-md-kmp-azureUpgrade kernel-rt-develUpgrade ocfs2-kmp-azureUpgrade dtb-mediatekUpgrade kernel-kvmsmallUpgrade dtb-qcomUpgrade kernel-source-azureUpgrade kernel-default-base-rebuildUpgrade dtb-lgUpgrade kernel-symsUpgrade kernel-default-optionalUpgrade kernel-rt_debug-develUpgrade dtb-armUpgrade dtb-rockchipUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade gfs2-kmp-azureUpgrade kernel-develUpgrade gfs2-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-source-vanillaUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatch-develUpgrade dtb-freescaleUpgrade kselftests-kmp-rtUpgrade kernel-azure-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debugUpgrade dtb-broadcomUpgrade kernel-64kb-optionalUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade dtb-marvellUpgrade dtb-hisiliconUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-debugUpgrade kernel-syms-rtUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatchUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade gfs2-kmp-64kbUpgrade dtb-amdUpgrade dtb-amazonUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-default-develUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-source-rtUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-64kbUpgrade dtb-appleUpgrade dtb-amlogicUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-apmUpgrade kselftests-kmp-azureUpgrade kernel-macrosUpgrade dtb-socionextUpgrade dtb-renesasUpgrade kernel-debug-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-default-extra | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.4.0-200-genericUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1072-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04aUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-5.4.0-1139-azureUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-5.4.0-1135-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-bluefieldUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-intelUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1140-azureUpgrade linux-image-oemUpgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-intel-iotg | Nov 4, 2024 | Sep 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub