CVE-2022-50015
- Source
- https://cve.org/CVERecord?id=CVE-2022-50015
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-50015.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-50015
- Downstream
- Related
- Published
- 2025-06-18T11:01:19Z
- Modified
- 2026-08-17T03:36:19Z
- Summary
- ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot
It is not yet clear, but it is possible to create a firmware so broken that it will send a reply message before a FW_READY message (it is not yet clear if FW_READY will arrive later). Since the reply_data is allocated only after the FW_READY message, this will lead to a NULL pointer dereference if not filtered out.
The issue was reported with IPC4 firmware but the same condition is present for IPC3.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50015.json" }- References
-
- https://git.kernel.org/stable/c/48945246cf802b9866f3a821103f1a7a196baf68
- https://git.kernel.org/stable/c/499cc881b09c8283ab5e75b0d6d21cb427722161
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50015.json
- https://nvd.nist.gov/vuln/detail/CVE-2022-50015
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git