CVE-2024-38550

ASoC: kirkwood: Fix potential NULL dereference

State: Published
Severity: 4.4 Medium
Published: Jun 19, 2024
Updated: May 23, 2026
Reserved: Jun 18, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: kirkwood: Fix potential NULL dereference

In kirkwood_dma_hw_params() mv_mbus_dram_info() returns NULL if CONFIG_PLAT_ORION macro is not defined. Fix this bug by adding NULL check.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Scores

CVSS	Score	Vector	Source
3.1	4.4 Medium	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	bb6a40fc5a830cae45ddd5cd6cfa151b008522ed to before d48d0c5fd733bd6d8d3ddb2ed553777ab4724169Affected bb6a40fc5a830cae45ddd5cd6cfa151b008522ed to before de9987cec6fde1dd41dfcb971433e05945852489Affected bb6a40fc5a830cae45ddd5cd6cfa151b008522ed to before 1a7254525ca7a6f3e37d7882d7f7ad97f6235f7cAffected bb6a40fc5a830cae45ddd5cd6cfa151b008522ed to before 5bf5154739cd676b6d0958079070557c8d96afb6Affected bb6a40fc5a830cae45ddd5cd6cfa151b008522ed to before 802b49e39da669b54bd9b77dc3c649999a446bf6Affected bb6a40fc5a830cae45ddd5cd6cfa151b008522ed to before ea60ab95723f5738e7737b56dda95e6feefa5b50Affected 145951900b763dc32bf31bd770f3f036a8348424Affected 5.13.12 to before 5.14Affected
LinuxLinux	5.14Affected before 5.14Not affected 5.15.161 through 5.15.Not affected 6.1.93 through 6.1.Not affected 6.6.33 through 6.6.Not affected 6.8.12 through 6.8.Not affected 6.9.3 through 6.9.*Not affected 6.10 and laterNot affected

Product

Versions

LinuxLinux

bb6a40fc5a830cae45ddd5cd6cfa151b008522ed to before d48d0c5fd733bd6d8d3ddb2ed553777ab4724169Affected
bb6a40fc5a830cae45ddd5cd6cfa151b008522ed to before de9987cec6fde1dd41dfcb971433e05945852489Affected
bb6a40fc5a830cae45ddd5cd6cfa151b008522ed to before 1a7254525ca7a6f3e37d7882d7f7ad97f6235f7cAffected
bb6a40fc5a830cae45ddd5cd6cfa151b008522ed to before 5bf5154739cd676b6d0958079070557c8d96afb6Affected
bb6a40fc5a830cae45ddd5cd6cfa151b008522ed to before 802b49e39da669b54bd9b77dc3c649999a446bf6Affected
bb6a40fc5a830cae45ddd5cd6cfa151b008522ed to before ea60ab95723f5738e7737b56dda95e6feefa5b50Affected
145951900b763dc32bf31bd770f3f036a8348424Affected
5.13.12 to before 5.14Affected

LinuxLinux

5.14Affected
before 5.14Not affected
5.15.161 through 5.15.*Not affected
6.1.93 through 6.1.*Not affected
6.6.33 through 6.6.*Not affected
6.8.12 through 6.8.*Not affected
6.9.3 through 6.9.*Not affected
6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.