In the Linux kernel, the following vulnerability has been resolved:
ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
Other, non DAI copier widgets could have the same stream name (sname) as the ALH copier and in that case the copier->data is NULL, no alh_data is attached, which could lead to NULL pointer dereference. We could check for this NULL pointer in sof_ipc4_prepare_copier_module() and avoid the crash, but a similar loop in sof_ipc4_widget_setup_comp_dai() will miscalculate the ALH device count, causing broken audio.
The correct fix is to harden the matching logic by making sure that the 1. widget is a DAI widget - so dai = w->private is valid 2. the dai (and thus the copier) is ALH copier
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Mar 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 27, 2025 |
| Suse | — | Upgrade kernel-rt_debug-vdsoUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade kernel-rt-develUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-xilinxUpgrade kernel-docsUpgrade ocfs2-kmp-rtUpgrade kernel-default-optionalUpgrade dtb-apmUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade kselftests-kmp-defaultUpgrade kernel-devel-rtUpgrade dtb-amlogicUpgrade reiserfs-kmp-rtUpgrade kernel-symsUpgrade cluster-md-kmp-defaultUpgrade kernel-debugUpgrade dlm-kmp-azureUpgrade kernel-rtUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dtb-socionextUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade kernel-defaultUpgrade kernel-kvmsmallUpgrade dtb-qcomUpgrade kselftests-kmp-rtUpgrade dtb-rockchipUpgrade dtb-sprdUpgrade dtb-armUpgrade kernel-develUpgrade kernel-syms-rtUpgrade dlm-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-source-rtUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-azure-extraUpgrade kernel-rt-extraUpgrade kernel-azure-develUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade kernel-rt-vdsoUpgrade kernel-sourceUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade dtb-lgUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade dtb-marvellUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade dtb-alteraUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-64kbUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade kernel-source-vanilla | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-22.04bUpgrade linux-image-raspi-realtimeUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-oem-22.04Upgrade linux-image-gcpUpgrade linux-image-generic-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.11.0-1015-azureUpgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-aws-64kUpgrade linux-image-azure-fde-6.8Upgrade linux-image-6.8.0-1035-awsUpgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-kvmUpgrade linux-image-azure-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-raspi-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-gkeUpgrade linux-image-virtual-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-oracleUpgrade linux-image-gke-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-78-genericUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-6.8.0-1032-oracle-64k | May 21, 2025 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub