Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-39473

ASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension If a process module does not have base config extension then the same format applies to all of it's inputs and the process->base_config_ext is NULL, causing NULL dereference when specifically crafted topology and sequences used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 648fea12847695d60ddeebea86597114885ee76e to < e3ae00ee238bce6cfa5ad935c921181c14d18fd6affected
  • 648fea12847695d60ddeebea86597114885ee76e to < 9e16f17a2a0e97b43538b272e7071537a3e03368affected
  • 648fea12847695d60ddeebea86597114885ee76e to < ffa077b2f6ad124ec3d23fbddc5e4b0ff2647af8affected

Linux Linux

Default version status: affected

  • 6.4affected
  • 0 to < 6.4unaffected
  • 6.6.34 to ≤ 6.6.*unaffected
  • 6.9.5 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References