In the Linux kernel, the following vulnerability has been resolved:
ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
Other, non DAI copier widgets could have the same stream name (sname) as the ALH copier and in that case the copier->data is NULL, no alh_data is attached, which could lead to NULL pointer dereference. We could check for this NULL pointer in sof_ipc4_prepare_copier_module() and avoid the crash, but a similar loop in sof_ipc4_widget_setup_comp_dai() will miscalculate the ALH device count, causing broken audio.
The correct fix is to harden the matching logic by making sure that the 1. widget is a DAI widget - so dai = w->private is valid 2. the dai (and thus the copier) is ALH copier
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Mar 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 27, 2025 |
| Suse | — | Upgrade dtb-apmUpgrade dtb-mediatekUpgrade ocfs2-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-default-optionalUpgrade kernel-rt-develUpgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade kernel-default-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-rtUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade dtb-socionextUpgrade cluster-md-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmallUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade kernel-symsUpgrade dtb-sprdUpgrade kernel-defaultUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-rtUpgrade kselftests-kmp-rtUpgrade kernel-develUpgrade dtb-armUpgrade kernel-default-baseUpgrade kernel-rt-livepatch-develUpgrade kernel-debugUpgrade cluster-md-kmp-rtUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-devel-azureUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade ocfs2-kmp-azureUpgrade dtb-renesasUpgrade kernel-sourceUpgrade kernel-debug-develUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade kernel-obs-buildUpgrade kernel-64kb-extraUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-debug-vdsoUpgrade kernel-docs-htmlUpgrade kernel-azureUpgrade dtb-marvellUpgrade dtb-caviumUpgrade kernel-azure-extraUpgrade kernel-source-vanillaUpgrade gfs2-kmp-64kb | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-78-genericUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-oracleUpgrade linux-image-virtual-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-gcp-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-6.8.0-1035-awsUpgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-aws-64kUpgrade linux-image-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-aws-6.8Upgrade linux-image-gcpUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-6.8Upgrade linux-image-azure-nvidiaUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidiaUpgrade linux-image-genericUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-oem-24.04bUpgrade linux-image-ibmUpgrade linux-image-azure | May 21, 2025 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub