CVE-2022-49498

ALSA: pcm: Check for null pointer of pointer substream before dereferencing it

Medium · published February 26, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
18.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ALSA: pcm: Check for null pointer of pointer substream before dereferencing it

Pointer substream is being dereferenced on the assignment of pointer card

before substream is being null checked with the macro PCM_RUNTIME_CHECK.

Although PCM_RUNTIME_CHECK calls BUG_ON, it still is useful to perform the

the pointer check before card is assigned.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00269 · 18.1th percentile
Published
2025-02-26T02:13Z
EPSS history
Timeline
  • 26 FEB 02:13Z
    ALSA: pcm: Check for null pointer of pointer substream before dereferencing it
    cvelistv5