CVE-2024-38551

Summary

In the Linux kernel, the following vulnerability has been resolved:

ASoC: mediatek: Assign dummy when codec not specified for a DAI link

MediaTek sound card drivers are checking whether a DAI link is present and used on a board to assign the correct parameters and this is done by checking the codec DAI names at probe time.

If no real codec is present, assign the dummy codec to the DAI link to avoid NULL pointer during string comparison.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux4302187d955f166c03b4fa7c993b89ffbabfca4e < 87b8dca6e06f9b1681bc52bf7bfa85c663a11158affected
LinuxLinux4302187d955f166c03b4fa7c993b89ffbabfca4e < cbbcabc7f0979f6542372cf88d7a9da7143a4226affected
LinuxLinux4302187d955f166c03b4fa7c993b89ffbabfca4e < 0c052b1c11d8119f3048b1f7b3c39a90500cacf9affected
LinuxLinux4302187d955f166c03b4fa7c993b89ffbabfca4e < 5f39231888c63f0a7708abc86b51b847476379d8affected
LinuxLinux6.3affected
LinuxLinux0 < 6.3unaffected
LinuxLinux6.6.33 <= 6.6.*unaffected
LinuxLinux6.8.12 <= 6.8.*unaffected
LinuxLinux6.9.3 <= 6.9.*unaffected
LinuxLinux6.10 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References