Riskcovery

CVE-2024-56696

ALSA: core: Fix possible NULL dereference caused by kunit_kzalloc()

State
Published
Severity
5.5 Medium
Published
Dec 28, 2024
Updated
May 11, 2026
Reserved
Dec 27, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: core: Fix possible NULL dereference caused by kunit_kzalloc()

kunit_kzalloc() may return a NULL pointer, dereferencing it without NULL check may lead to NULL dereference. Add NULL checks for all the kunit_kzalloc() in sound_kunit.c

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 3e39acf56ededdebd1033349a16b704839b94b28 to before f5486bf8abfe778b368d8fd1aa655dc01d0013caAffected
  • 3e39acf56ededdebd1033349a16b704839b94b28 to before 8bfff486ecc79a72e9380e2d5e0ff234d5542d2fAffected
  • 3e39acf56ededdebd1033349a16b704839b94b28 to before 9ad467a2b2716d4ed12f003b041aa6c776a13ff5Affected
LinuxLinux
  • 6.9Affected
  • before 6.9Not affected
  • 6.11.11 through 6.11.*Not affected
  • 6.12.2 through 6.12.*Not affected
  • 6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.