Riskcovery

CVE-2024-40964

ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind()

State
Published
Severity
Not scored
Published
Jul 12, 2024
Updated
May 11, 2026
Reserved
Jul 12, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind()

The cs35l41_hda_unbind() function clears the hda_component entry matching it's index and then dereferences the codec pointer held in the first element of the hda_component array, this is an issue when the device index was 0.

Instead use the codec pointer stashed in the cs35l41_hda structure as it will still be valid.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7cf5ce66dfda2be444ea668c3d48f732ba4a7fd1 to before ff27bd8e17884f7cdefecb3f3817caadd6813dc0Affected
  • 7cf5ce66dfda2be444ea668c3d48f732ba4a7fd1 to before 19be722369c347f3af1c5848e303980ed040b819Affected
  • 7cf5ce66dfda2be444ea668c3d48f732ba4a7fd1 to before 6386682cdc8b41319c92fbbe421953e33a28840cAffected
LinuxLinux
  • 6.6Affected
  • before 6.6Not affected
  • 6.6.36 through 6.6.*Not affected
  • 6.9.7 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.