CVE-2024-50292

ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove

State: Published
Severity: 5.5 Medium
Published: Nov 19, 2024
Updated: May 11, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove

In case of error when requesting ctrl_chan DMA channel, ctrl_chan is not null. So the release of the dma channel leads to the following issue: [ 4.879000] st,stm32-spdifrx 500d0000.audio-controller: dma_request_slave_channel error -19 [ 4.888975] Unable to handle kernel NULL pointer dereference at virtual address 000000000000003d [...] [ 5.096577] Call trace: [ 5.099099] dma_release_channel+0x24/0x100 [ 5.103235] stm32_spdifrx_remove+0x24/0x60 [snd_soc_stm32_spdifrx] [ 5.109494] stm32_spdifrx_probe+0x320/0x4c4 [snd_soc_stm32_spdifrx]

To avoid this issue, release channel only if the pointer is valid.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	794df9448edb55978e50372f083aeedade1b2844 to before 3a977b554f668382dfba31fd62e4cce4fe5643dbAffected 794df9448edb55978e50372f083aeedade1b2844 to before 0d75f887aabd80cf37ea48d28f159afa7850ea28Affected 794df9448edb55978e50372f083aeedade1b2844 to before 4f1d74f74752eab8af6b8b28797dc6490d57374cAffected 794df9448edb55978e50372f083aeedade1b2844 to before 23bdbd1ef3e063e03d3c50c15a591b005ebbae39Affected 794df9448edb55978e50372f083aeedade1b2844 to before 22ae9321054cf7f36c537702af133659f51a0b88Affected 794df9448edb55978e50372f083aeedade1b2844 to before 9bb4af400c386374ab1047df44c508512c08c31fAffected
LinuxLinux	5.7Affected before 5.7Not affected 5.10.230 through 5.10.Not affected 5.15.172 through 5.15.Not affected 6.1.117 through 6.1.Not affected 6.6.61 through 6.6.Not affected 6.11.8 through 6.11.*Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

794df9448edb55978e50372f083aeedade1b2844 to before 3a977b554f668382dfba31fd62e4cce4fe5643dbAffected
794df9448edb55978e50372f083aeedade1b2844 to before 0d75f887aabd80cf37ea48d28f159afa7850ea28Affected
794df9448edb55978e50372f083aeedade1b2844 to before 4f1d74f74752eab8af6b8b28797dc6490d57374cAffected
794df9448edb55978e50372f083aeedade1b2844 to before 23bdbd1ef3e063e03d3c50c15a591b005ebbae39Affected
794df9448edb55978e50372f083aeedade1b2844 to before 22ae9321054cf7f36c537702af133659f51a0b88Affected
794df9448edb55978e50372f083aeedade1b2844 to before 9bb4af400c386374ab1047df44c508512c08c31fAffected

LinuxLinux

5.7Affected
before 5.7Not affected
5.10.230 through 5.10.*Not affected
5.15.172 through 5.15.*Not affected
6.1.117 through 6.1.*Not affected
6.6.61 through 6.6.*Not affected
6.11.8 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.