In the Linux kernel, the following vulnerability has been resolved:
ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
Other, non DAI copier widgets could have the same stream name (sname) as the ALH copier and in that case the copier->data is NULL, no alh_data is attached, which could lead to NULL pointer dereference. We could check for this NULL pointer in sof_ipc4_prepare_copier_module() and avoid the crash, but a similar loop in sof_ipc4_widget_setup_comp_dai() will miscalculate the ALH device count, causing broken audio.
The correct fix is to harden the matching logic by making sure that the 1. widget is a DAI widget - so dai = w->private is valid 2. the dai (and thus the copier) is ALH copier
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Mar 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 27, 2025 |
| Suse | — | Upgrade kselftests-kmp-rtUpgrade dtb-armUpgrade kernel-64kb-develUpgrade reiserfs-kmp-rtUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade kernel-rt-develUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade kernel-defaultUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-rtUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-debugUpgrade kernel-symsUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-macrosUpgrade dtb-sprdUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatch-develUpgrade dtb-mediatekUpgrade dlm-kmp-rtUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-develUpgrade kernel-syms-rtUpgrade dtb-amlogicUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade dtb-socionextUpgrade kernel-default-develUpgrade kernel-rt-optionalUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade dtb-alteraUpgrade dtb-amdUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade ocfs2-kmp-azureUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade dtb-marvellUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-debug-vdsoUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade kernel-rt-extraUpgrade kernel-azure-develUpgrade gfs2-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-sourceUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade dtb-lgUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-source-azureUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade ocfs2-kmp-64kbUpgrade dtb-exynos | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-nvidiaUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-gcpUpgrade linux-image-raspi-realtimeUpgrade linux-image-azureUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-aws-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.11.0-1014-awsUpgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-oem-24.04bUpgrade linux-image-azure-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-1022-oemUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-6.8.0-1035-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-raspi-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-azure-6.8Upgrade linux-image-gkeUpgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-78-genericUpgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-6.8.0-1032-oracle-64k | May 21, 2025 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub