In the Linux kernel, the following vulnerability has been resolved:
ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
Other, non DAI copier widgets could have the same stream name (sname) as the ALH copier and in that case the copier->data is NULL, no alh_data is attached, which could lead to NULL pointer dereference. We could check for this NULL pointer in sof_ipc4_prepare_copier_module() and avoid the crash, but a similar loop in sof_ipc4_widget_setup_comp_dai() will miscalculate the ALH device count, causing broken audio.
The correct fix is to harden the matching logic by making sure that the 1. widget is a DAI widget - so dai = w->private is valid 2. the dai (and thus the copier) is ALH copier
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Mar 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 27, 2025 |
| Suse | — | Upgrade dlm-kmp-rtUpgrade kernel-macrosUpgrade kernel-default-base-rebuildUpgrade dtb-amlogicUpgrade dtb-apmUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-rtUpgrade kernel-docsUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade dtb-qcomUpgrade kernel-debugUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-symsUpgrade dtb-socionextUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-sprdUpgrade kernel-obs-qaUpgrade kernel-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-develUpgrade dtb-nvidiaUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-develUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-default-extraUpgrade kernel-default-livepatch-develUpgrade kernel-rt-extraUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade dlm-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-default-vdsoUpgrade dtb-amdUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-docs-htmlUpgrade kernel-debug-vdsoUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade dtb-caviumUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade dtb-marvellUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade dtb-exynosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade gfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade dtb-lgUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade kernel-sourceUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade kernel-syms-azure | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1035-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-6.8.0-78-genericUpgrade linux-image-realtimeUpgrade linux-image-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracleUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-gke-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-gcp-64kUpgrade linux-image-kvmUpgrade linux-image-aws-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-gcpUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-generic-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidiaUpgrade linux-image-gkeop-6.8Upgrade linux-image-genericUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-oem-22.04cUpgrade linux-image-azureUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04b | May 21, 2025 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub