CVE-2024-38605

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix NULL module pointer assignment at card init The commit 81033c6b584b ("ALSA: core: Warn on empty module") introduced a WARN_ON() for a NULL module pointer passed at snd_card object creation, and it also wraps the code around it with '#ifdef MODULE'. This works in most cases, but the devils are always in details. "MODULE" is defined when the target code (i.e. the sound core) is built as a module; but this doesn't mean that the caller is also built-in or not. Namely, when only the sound core is built-in (CONFIG...

Affected product and versions

Product

Linux Linux, linux_kernel, linux kernel

Affected versions

>= 81033c6b584b44514cbb16fffc26ca29a0fa6270 < d7ff29a429b56f04783152ad7bbd7233b740e434, >= 81033c6b584b44514cbb16fffc26ca29a0fa6270 < e7e0ca200772bdb2fdc6d43d32d341e87a36f811, >= 81033c6b584b44514cbb16fffc26ca29a0fa6270 < e007476725730c1a68387b54b7629486d8a8301e, >= 81033c6b584b44514cbb16fffc26ca29a0fa6270 < e644036a3e2b2c9b3eee3c61b5d31c2ca8b5ba92, >= 81033c6b584b44514cbb16fffc26ca29a0fa6270 < c935e72139e6d523defd60fe875c01eb1f9ea5c5, >= 81033c6b584b44514cbb16fffc26ca29a0fa6270 < 6b8374ee2cabcf034faa34e69a855dc496a9ec12, >= 81033c6b584b44514cbb16fffc26ca29a0fa6270 < 39381fe7394e5eafac76e7e9367e7351138a29c1, >= 5.9, >= 81033c6b584b < d7ff29a429b5, >= 81033c6b584b < e7e0ca200772, >= 81033c6b584b < e00747672573, >= 81033c6b584b < e644036a3e2b, >= 81033c6b584b < c935e72139e6, >= 81033c6b584b < 6b8374ee2cab, >= 81033c6b584b < 39381fe7394e, >= 5.9 < 5.10.219, >= 5.11 < 5.15.161, >= 5.16 < 6.1.93, >= 6.2 < 6.6.33, >= 6.7 < 6.8.12

Fixed versions

5.10.219, 5.15.161, 6.1.93, 6.6.33, 6.8.12, 6.9.3

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-476