In the Linux kernel, the following vulnerability has been resolved:
ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
Other, non DAI copier widgets could have the same stream name (sname) as the ALH copier and in that case the copier->data is NULL, no alh_data is attached, which could lead to NULL pointer dereference. We could check for this NULL pointer in sof_ipc4_prepare_copier_module() and avoid the crash, but a similar loop in sof_ipc4_widget_setup_comp_dai() will miscalculate the ALH device count, causing broken audio.
The correct fix is to harden the matching logic by making sure that the 1. widget is a DAI widget - so dai = w->private is valid 2. the dai (and thus the copier) is ALH copier
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Mar 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 27, 2025 |
| Suse | — | Upgrade dtb-apmUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade kernel-defaultUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade dtb-rockchipUpgrade dtb-sprdUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade reiserfs-kmp-rtUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade kernel-devel-rtUpgrade dtb-nvidiaUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade kernel-debugUpgrade kernel-symsUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-develUpgrade dtb-armUpgrade kernel-azure-vdsoUpgrade dtb-amlogicUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade dtb-socionextUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-source-rtUpgrade dtb-amdUpgrade dtb-marvellUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade dtb-alteraUpgrade kernel-docs-htmlUpgrade kernel-debug-vdsoUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade gfs2-kmp-rtUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade dtb-lgUpgrade dtb-appleUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-debug-develUpgrade dtb-broadcomUpgrade kernel-64kbUpgrade kernel-azure-optionalUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade kernel-devel-azureUpgrade dtb-amazonUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade gfs2-kmp-default | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-realtimeUpgrade linux-image-gkeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-78-genericUpgrade linux-image-gcp-64kUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-oracle-6.8Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-6.8.0-1035-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-fdeUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-nvidiaUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-gkeopUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-azureUpgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-oem-24.04bUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-generic-lpae | May 21, 2025 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub