CVE-2024-58012CWE-476

CVE-2024-58012

Medium · published February 27, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
11.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params

Each cpu DAI should associate with a widget. However, the topology might

not create the right number of DAI widgets for aggregated amps. And it

will cause NULL pointer deference.

Check that the DAI widget associated with the CPU DAI is valid to prevent

NULL pointer deference due to missing DAI widgets in topologies with

aggregated amps.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00214 · 11.2th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2025-02-27T08:15Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel< 6.12.146.12.14
linux/linux_kernel≥ 6.13, < 6.13.36.13.3
References (4)
EPSS history
Timeline
  • 27 FEB 02:12Z
    ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params
    cvelistv5