← CVE Intelligence

CVE-2024-39473

ASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension If a process module does not have base config extension then the same format applies to all of it's inputs and the process->base_config_ext is NULL, causing NULL dereference when specifically crafted topology and sequences used.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 648fea12847695d60ddeebea86597114885ee76e before e3ae00ee238bce6cfa5ad935c921181c14d18fd6; affected 648fea12847695d60ddeebea86597114885ee76e before 9e16f17a2a0e97b43538b272e7071537a3e03368; affected 648fea12847695d60ddeebea86597114885ee76e before ffa077b2f6ad124ec3d23fbddc5e4b0ff2647af8
Linux / Linuxaffected 6.4; unaffected 0 before 6.4; unaffected 6.6.34 through 6.6.*; unaffected 6.9.5 through 6.9.*; unaffected 6.10 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.