Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-40964

ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind() The cs35l41_hda_unbind() function clears the hda_component entry matching it's index and then dereferences the codec pointer held in the first element of the hda_component array, this is an issue when the device index was 0. Instead use the codec pointer stashed in the cs35l41_hda structure as it will still be valid.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 7cf5ce66dfda2be444ea668c3d48f732ba4a7fd1 to < ff27bd8e17884f7cdefecb3f3817caadd6813dc0affected
  • 7cf5ce66dfda2be444ea668c3d48f732ba4a7fd1 to < 19be722369c347f3af1c5848e303980ed040b819affected
  • 7cf5ce66dfda2be444ea668c3d48f732ba4a7fd1 to < 6386682cdc8b41319c92fbbe421953e33a28840caffected

Linux Linux

Default version status: affected

  • 6.6affected
  • 0 to < 6.6unaffected
  • 6.6.36 to ≤ 6.6.*unaffected
  • 6.9.7 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References