CVE-2024-41037

Source
https://cve.org/CVERecord?id=CVE-2024-41037
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-41037.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-41037
Downstream
Related
Published
2024-07-29T14:31:51.501Z
Modified
2026-03-14T12:35:05.679042Z
Summary
ASoC: SOF: Intel: hda: fix null deref on system suspend entry
Details

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: Intel: hda: fix null deref on system suspend entry

When system enters suspend with an active stream, SOF core calls hwparamsupon_resume(). On Intel platforms with HDA DMA used to manage the link DMA, this leads to call chain of

hdadspsethwparamsuponresume() -> hdadspdaissuspend() -> hdadaisuspend() -> hdaipc4posttrigger()

A bug is hit in hdadaisuspend() as hdalinkdmacleanup() is run first, which clears hextstream->linksubstream, and then hdaipc4posttrigger() is called with a NULL sndpcmsubstream pointer.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41037.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
2b009fa0823c1510700fd17a0780ddd06a460fb4
Fixed
8246bbf818ed7b8d5afc92b951e6d562b45c2450
Fixed
993af0f2d9f24e3c18a445ae22b34190d1fcad61
Fixed
9065693dcc13f287b9e4991f43aee70cf5538fdd

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-41037.json"