CVE-2024-39473

ASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension

published July 5, 2024

CVSS
—
EPSS
0%
Percentile
10.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension

If a process module does not have base config extension then the same

format applies to all of it's inputs and the process->base_config_ext is

NULL, causing NULL dereference when specifically crafted topology and

sequences used.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00211 · 10.9th percentile
Published
2024-07-05T06:55Z
EPSS history
Timeline
  • 05 JUL 06:55Z
    ASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension
    cvelistv5