CVE-2024-50105

ASoC: qcom: sc7280: Fix missing Soundwire runtime stream alloc

Medium · published November 5, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
9.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ASoC: qcom: sc7280: Fix missing Soundwire runtime stream alloc

Commit 15c7fab0e047 ("ASoC: qcom: Move Soundwire runtime stream alloc to

soundcards") moved the allocation of Soundwire stream runtime from the

Qualcomm Soundwire driver to each individual machine sound card driver,

except that it forgot to update SC7280 card.

Just like for other Qualcomm sound cards using Soundwire, the card

driver should allocate and release the runtime. Otherwise sound

playback will result in a NULL pointer dereference or other effect of

uninitialized memory accesses (which was confirmed on SDM845 having

similar issue).

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00202 · 9.6th percentile
Published
2024-11-05T17:10Z
EPSS history
Timeline
  • 05 NOV 17:10Z
    ASoC: qcom: sc7280: Fix missing Soundwire runtime stream alloc
    cvelistv5