CVE-2024-50292

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-50292
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50292.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-50292
Downstream
Related
Published
2024-11-19T01:30:38.036Z
Modified
2026-03-20T12:39:40.887242Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
Details

In the Linux kernel, the following vulnerability has been resolved:

ASoC: stm32: spdifrx: fix dma channel release in stm32spdifrxremove

In case of error when requesting ctrlchan DMA channel, ctrlchan is not null. So the release of the dma channel leads to the following issue: [ 4.879000] st,stm32-spdifrx 500d0000.audio-controller: dmarequestslavechannel error -19 [ 4.888975] Unable to handle kernel NULL pointer dereference at virtual address 000000000000003d [...] [ 5.096577] Call trace: [ 5.099099] dmareleasechannel+0x24/0x100 [ 5.103235] stm32spdifrxremove+0x24/0x60 [sndsocstm32spdifrx] [ 5.109494] stm32spdifrxprobe+0x320/0x4c4 [sndsocstm32_spdifrx]

To avoid this issue, release channel only if the pointer is valid.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50292.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
794df9448edb55978e50372f083aeedade1b2844
Fixed
3a977b554f668382dfba31fd62e4cce4fe5643db
Fixed
0d75f887aabd80cf37ea48d28f159afa7850ea28
Fixed
4f1d74f74752eab8af6b8b28797dc6490d57374c
Fixed
23bdbd1ef3e063e03d3c50c15a591b005ebbae39
Fixed
22ae9321054cf7f36c537702af133659f51a0b88
Fixed
9bb4af400c386374ab1047df44c508512c08c31f

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50292.json"