In the Linux kernel, the following vulnerability has been resolved:
ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
When using kernel with the following extra config,
- CONFIG_KASAN=y - CONFIG_KASAN_GENERIC=y - CONFIG_KASAN_INLINE=y - CONFIG_KASAN_VMALLOC=y - CONFIG_FRAME_WARN=4096
kernel detects that snd_pcm_suspend_all() access a freed 'snd_soc_pcm_runtime' object when the system is suspended, which leads to a use-after-free bug:
[ 52.047746] BUG: KASAN: use-after-free in snd_pcm_suspend_all+0x1a8/0x270 [ 52.047765] Read of size 1 at addr ffff0000b9434d50 by task systemd-sleep/2330
[ 52.047785] Call trace: [ 52.047787] dump_backtrace+0x0/0x3c0 [ 52.047794] show_stack+0x34/0x50 [ 52.047797] dump_stack_lvl+0x68/0x8c [ 52.047802] print_address_description.constprop.0+0x74/0x2c0 [ 52.047809] kasan_report+0x210/0x230 [ 52.047815] __asan_report_load1_noabort+0x3c/0x50 [ 52.047820] snd_pcm_suspend_all+0x1a8/0x270 [ 52.047824] snd_soc_suspend+0x19c/0x4e0
The snd_pcm_sync_stop() has a NULL check on 'substream->runtime' before making any access. So we need to always set 'substream->runtime' to NULL everytime we kfree() it.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.167-112.165Upgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.226-214.879Upgrade bpftool-debuginfoUpgrade python-perfUpgrade perfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade perf-debuginfo | Oct 3, 2024 | Sep 18, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | Sep 18, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 21, 2024 | Sep 18, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 18, 2024 |
| Suse | — | Upgrade kernel-rt-develUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dtb-lgUpgrade ocfs2-kmp-azureUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-develUpgrade dtb-armUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade gfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-rtUpgrade kernel-64kb-develUpgrade dtb-alteraUpgrade dtb-nvidiaUpgrade kernel-source-azureUpgrade kernel-default-base-rebuildUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade kernel-azure-livepatch-develUpgrade dtb-mediatekUpgrade dtb-allwinnerUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azureUpgrade kernel-develUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatchUpgrade kernel-symsUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade cluster-md-kmp-rtUpgrade dtb-exynosUpgrade kernel-default-vdsoUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-azure-optionalUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade dtb-caviumUpgrade kernel-64kb-livepatch-develUpgrade dtb-renesasUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade kernel-docsUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-vdsoUpgrade dtb-socionextUpgrade kernel-azure-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-default-extraUpgrade kernel-syms-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-64kbUpgrade dtb-appleUpgrade kernel-default-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-rtUpgrade kernel-obs-qaUpgrade dtb-amlogicUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-docs-htmlUpgrade dtb-apmUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-macrosUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade dtb-amdUpgrade dtb-amazonUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-debugUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-default-baseUpgrade kernel-64kb-optionalUpgrade dtb-sprdUpgrade dtb-marvell | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-oem-osp1Upgrade linux-image-intelUpgrade linux-image-oemUpgrade linux-image-5.4.0-1140-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-oem-22.04dUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-azure-cvmUpgrade linux-image-gkeopUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1044-iotUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-125-genericUpgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-5.4.0-1135-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-200-genericUpgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-ibm-classicUpgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspi2Upgrade linux-image-aws-lts-20.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1072-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-5.4.0-1139-azureUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-kvm | Nov 4, 2024 | Sep 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub