CVE-2024-41069

ASoC: topology: Fix references to freed memory

State: Published
Severity: 7.8 High
Published: Jul 29, 2024
Updated: Aug 5, 2026
Reserved: Jul 12, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: topology: Fix references to freed memory

Most users after parsing a topology file, release memory used by it, so having pointer references directly into topology file contents is wrong. Use devm_kmemdup(), to allocate memory as needed.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	7df04ea7a31eaa75bdad2905f07cc097b15558ee to before b188d7f3dfab10e332e3c1066e18857964a520d2Affected 7df04ea7a31eaa75bdad2905f07cc097b15558ee to before ab5a6208b4d6872b1c6ecea1867940fc668cc76dAffected 7df04ea7a31eaa75bdad2905f07cc097b15558ee to before ccae5c6a1fab9494c86b7856faf05e296c617702Affected 7df04ea7a31eaa75bdad2905f07cc097b15558ee to before 97ab304ecd95c0b1703ff8c8c3956dc6e2afe8e1Affected
LinuxLinux	5.1Affected before 5.1Not affected 6.1.101 through 6.1.Not affected 6.6.42 through 6.6.Not affected 6.9.11 through 6.9.*Not affected 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.