In the Linux kernel, the following vulnerability has been resolved:
ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
When using kernel with the following extra config,
- CONFIG_KASAN=y - CONFIG_KASAN_GENERIC=y - CONFIG_KASAN_INLINE=y - CONFIG_KASAN_VMALLOC=y - CONFIG_FRAME_WARN=4096
kernel detects that snd_pcm_suspend_all() access a freed 'snd_soc_pcm_runtime' object when the system is suspended, which leads to a use-after-free bug:
[ 52.047746] BUG: KASAN: use-after-free in snd_pcm_suspend_all+0x1a8/0x270 [ 52.047765] Read of size 1 at addr ffff0000b9434d50 by task systemd-sleep/2330
[ 52.047785] Call trace: [ 52.047787] dump_backtrace+0x0/0x3c0 [ 52.047794] show_stack+0x34/0x50 [ 52.047797] dump_stack_lvl+0x68/0x8c [ 52.047802] print_address_description.constprop.0+0x74/0x2c0 [ 52.047809] kasan_report+0x210/0x230 [ 52.047815] __asan_report_load1_noabort+0x3c/0x50 [ 52.047820] snd_pcm_suspend_all+0x1a8/0x270 [ 52.047824] snd_soc_suspend+0x19c/0x4e0
The snd_pcm_sync_stop() has a NULL check on 'substream->runtime' before making any access. So we need to always set 'substream->runtime' to NULL everytime we kfree() it.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.167-112.165Upgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.226-214.879Upgrade bpftool-debuginfoUpgrade python-perf-debuginfo | Oct 3, 2024 | Sep 18, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Sep 18, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 21, 2024 | Sep 18, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 18, 2024 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade dtb-caviumUpgrade dtb-nvidiaUpgrade kernel-rt-develUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade kernel-azure-develUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade dtb-rockchipUpgrade kernel-default-vdsoUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade gfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-rt-extraUpgrade kernel-64kb-develUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-obs-buildUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-syms-azureUpgrade cluster-md-kmp-rtUpgrade dtb-armUpgrade dtb-allwinnerUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade dtb-mediatekUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade kernel-devel-azureUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade dtb-xilinxUpgrade kernel-rtUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-freescaleUpgrade kernel-source-rtUpgrade kernel-64kb-optionalUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-debug-develUpgrade gfs2-kmp-64kbUpgrade dtb-amdUpgrade dtb-amazonUpgrade kernel-default-livepatchUpgrade kernel-defaultUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-default-develUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-azure-vdsoUpgrade dtb-appleUpgrade dtb-amlogicUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kbUpgrade kernel-64kb-livepatch-develUpgrade dtb-renesasUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade dtb-socionextUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-obs-qaUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade dtb-apmUpgrade cluster-md-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade kernel-rt_debugUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-debugUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-sprdUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade kernel-default-base | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-oracleUpgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtualUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1044-iotUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1075-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1140-azureUpgrade linux-image-oemUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-intelUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1135-awsUpgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-bluefieldUpgrade linux-image-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-intel-iotgUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-200-genericUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1139-azureUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64k-hwe-24.04 | Nov 4, 2024 | Sep 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub