CVE-2024-50160

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-50160
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs8409: Fix possible NULL dereference If snd_hda_gen_add_kctl fails to allocate memory and returns NULL, then NULL pointer dereference will occur in the next line. Since dolphin_fixups function is a hda_fixup function which is not supposed to return any errors, add simple check before dereference, ignore the fail. Found by Linux Verification Center (linuxtesting.org) with SVACE.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/21dc97d5086fdabbe278786bb0a03cbf2e26c793 Patch
https://git.kernel.org/stable/c/4e19aca8db696b6ba4dd8c73657405e15c695f14 Patch
https://git.kernel.org/stable/c/8971fd61210d75fd2af225621cd2fcc87eb1847c Patch
https://git.kernel.org/stable/c/a5dd71a8b849626f42d08a5e73d382f2016fc7bc Patch
https://git.kernel.org/stable/c/c9bd4a82b4ed32c6d1c90500a52063e6e341517f Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*
History

13 Nov 2024, 16:13

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/21dc97d5086fdabbe278786bb0a03cbf2e26c793 - () https://git.kernel.org/stable/c/21dc97d5086fdabbe278786bb0a03cbf2e26c793 - Patch
References () https://git.kernel.org/stable/c/4e19aca8db696b6ba4dd8c73657405e15c695f14 - () https://git.kernel.org/stable/c/4e19aca8db696b6ba4dd8c73657405e15c695f14 - Patch
References () https://git.kernel.org/stable/c/8971fd61210d75fd2af225621cd2fcc87eb1847c - () https://git.kernel.org/stable/c/8971fd61210d75fd2af225621cd2fcc87eb1847c - Patch
References () https://git.kernel.org/stable/c/a5dd71a8b849626f42d08a5e73d382f2016fc7bc - () https://git.kernel.org/stable/c/a5dd71a8b849626f42d08a5e73d382f2016fc7bc - Patch
References () https://git.kernel.org/stable/c/c9bd4a82b4ed32c6d1c90500a52063e6e341517f - () https://git.kernel.org/stable/c/c9bd4a82b4ed32c6d1c90500a52063e6e341517f - Patch
CWE CWE-476
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux

08 Nov 2024, 19:01

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ALSA: hda/cs8409: Se corrige una posible desreferencia de NULL. Si snd_hda_gen_add_kctl no puede asignar memoria y devuelve NULL, se producirá una desreferencia de puntero NULL en la siguiente línea. Dado que la función dolphin_fixups es una función hda_fixup que no debería devolver ningún error, se debe agregar una comprobación simple antes de la desreferencia e ignorar el error. Encontrado por Linux Verification Center (linuxtesting.org) con SVACE.

07 Nov 2024, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-11-07 10:15

Updated : 2025-10-01 21:15

NVD link : CVE-2024-50160

Mitre link : CVE-2024-50160

CVE.ORG link : CVE-2024-50160

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference