DEBIAN-CVE-2024-41037
- Source
- https://security-tracker.debian.org/tracker/DEBIAN-CVE-2024-41037
- Import Source
- https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-41037.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2024-41037
- Upstream
- Published
- 2024-07-29T15:15:12Z
- Modified
- 2025-09-19T06:09:09Z
- Summary
- [none]
- Details
-
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: fix null deref on system suspend entry When system enters suspend with an active stream, SOF core calls hwparamsuponresume(). On Intel platforms with HDA DMA used to manage the link DMA, this leads to call chain of hdadspsethwparamsuponresume() -> hdadspdaissuspend() -> hdadaisuspend() -> hdaipc4posttrigger() A bug is hit in hdadaisuspend() as hdalinkdmacleanup() is run first, which clears hextstream->linksubstream, and then hdaipc4posttrigger() is called with a NULL sndpcm_substream pointer.
- References
Affected packages
Debian:13 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source
Debian:14 / linux
Package
- Name
- linux
- Purl
- pkg:deb/debian/linux?arch=source