Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot It is not yet clear, but it is possible to create a firmware so broken that it will send a reply message before a FW_READY message (it is not yet clear if FW_READY will arrive later). Since the reply_data is allocated only after the FW_READY message, this will lead to a NULL pointer dereference if not filtered out. The issue was reported with IPC4 firmware but the same condition is present for IPC3.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected febf5da81ea80fa01e141e3ad35526865681418b before 48945246cf802b9866f3a821103f1a7a196baf68; affected febf5da81ea80fa01e141e3ad35526865681418b before 499cc881b09c8283ab5e75b0d6d21cb427722161 |
| Linux / Linux | affected 5.16; unaffected 0 before 5.16; unaffected 5.19.4 through 5.19.*; unaffected 6.0 through * |
CWE
No CWE identifiers supplied.