CVE-2024-40964

ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind()

published July 12, 2024

CVSS
—
EPSS
0%
Percentile
20.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind()

The cs35l41_hda_unbind() function clears the hda_component entry

matching it's index and then dereferences the codec pointer held in the

first element of the hda_component array, this is an issue when the

device index was 0.

Instead use the codec pointer stashed in the cs35l41_hda structure as it

will still be valid.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00291 · 20.5th percentile
Published
2024-07-12T12:32Z
EPSS history
Timeline
  • 12 JUL 12:32Z
    ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind()
    cvelistv5