In the Linux kernel, the following vulnerability has been resolved:
ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
When using kernel with the following extra config,
- CONFIG_KASAN=y - CONFIG_KASAN_GENERIC=y - CONFIG_KASAN_INLINE=y - CONFIG_KASAN_VMALLOC=y - CONFIG_FRAME_WARN=4096
kernel detects that snd_pcm_suspend_all() access a freed 'snd_soc_pcm_runtime' object when the system is suspended, which leads to a use-after-free bug:
[ 52.047746] BUG: KASAN: use-after-free in snd_pcm_suspend_all+0x1a8/0x270 [ 52.047765] Read of size 1 at addr ffff0000b9434d50 by task systemd-sleep/2330
[ 52.047785] Call trace: [ 52.047787] dump_backtrace+0x0/0x3c0 [ 52.047794] show_stack+0x34/0x50 [ 52.047797] dump_stack_lvl+0x68/0x8c [ 52.047802] print_address_description.constprop.0+0x74/0x2c0 [ 52.047809] kasan_report+0x210/0x230 [ 52.047815] __asan_report_load1_noabort+0x3c/0x50 [ 52.047820] snd_pcm_suspend_all+0x1a8/0x270 [ 52.047824] snd_soc_suspend+0x19c/0x4e0
The snd_pcm_sync_stop() has a NULL check on 'substream->runtime' before making any access. So we need to always set 'substream->runtime' to NULL everytime we kfree() it.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.226-214.879Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.167-112.165 | Oct 3, 2024 | Sep 18, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Sep 18, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 21, 2024 | Sep 18, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 18, 2024 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-amazonUpgrade kernel-64kb-extraUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-amdUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-default-develUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-debug-vdsoUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade dtb-socionextUpgrade kernel-rt_debug-vdsoUpgrade dtb-renesasUpgrade dtb-apmUpgrade kernel-docs-htmlUpgrade kernel-64kb-livepatch-develUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade kernel-default-baseUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade dtb-marvellUpgrade kernel-64kb-optionalUpgrade kernel-macrosUpgrade dtb-appleUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade kernel-azure-extraUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-debugUpgrade kernel-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-source-rtUpgrade kernel-default-base-rebuildUpgrade dtb-armUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-syms-azureUpgrade ocfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kernel-rt-extraUpgrade kernel-default-vdsoUpgrade kernel-obs-buildUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade dtb-qcomUpgrade dtb-mediatekUpgrade dtb-allwinnerUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade dtb-alteraUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-azureUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade kernel-azure-optionalUpgrade kernel-azure-develUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade kernel-rt-develUpgrade cluster-md-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade gfs2-kmp-rt | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-intelUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-22.04dUpgrade linux-image-oemUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-5.4.0-1140-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-intel-iotgUpgrade linux-image-oem-osp1Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1135-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-genericUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-bluefieldUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-125-genericUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-5.4.0-1139-azureUpgrade linux-image-oracle-64kUpgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1072-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.4.0-200-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-gkeop-5.4Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1016-raspi | Nov 4, 2024 | Sep 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub