Bug 2300405 (CVE-2024-41037) - CVE-2024-41037 kernel: ASoC: SOF: Intel: hda: fix null deref on system suspend entry
Summary: CVE-2024-41037 kernel: ASoC: SOF: Intel: hda: fix null deref on system suspen...
Keywords:
Status: NEW
Alias: CVE-2024-41037
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2301538
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-07-29 15:32 UTC by OSIDB Bzimport
Modified: 2024-09-25 16:10 UTC (History)
4 users (show)

Fixed In Version: kernel 6.6.41, kernel 6.9.10, kernel 6.10
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2024-07-29 15:32:49 UTC
In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: Intel: hda: fix null deref on system suspend entry

When system enters suspend with an active stream, SOF core
calls hw_params_upon_resume(). On Intel platforms with HDA DMA used
to manage the link DMA, this leads to call chain of

   hda_dsp_set_hw_params_upon_resume()
 -> hda_dsp_dais_suspend()
 -> hda_dai_suspend()
 -> hda_ipc4_post_trigger()

A bug is hit in hda_dai_suspend() as hda_link_dma_cleanup() is run first,
which clears hext_stream->link_substream, and then hda_ipc4_post_trigger()
is called with a NULL snd_pcm_substream pointer.

Comment 1 Mauro Matteo Cascella 2024-07-30 09:07:20 UTC
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024072923-CVE-2024-41037-84b8@gregkh/T

Comment 2 Mauro Matteo Cascella 2024-07-30 09:07:40 UTC
Created kernel tracking bugs for this issue:

Affects: fedora-all [bug 2301538]


Note You need to log in before you can comment on or make changes to this bug.