CVE-2024-50104

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: qcom: sdm845: add missing soundwire runtime stream alloc

During the migration of Soundwire runtime stream allocation from

the Qualcomm Soundwire controller to SoC's soundcard drivers the sdm845

soundcard was forgotten.

At this point any playback attempt or audio daemon startup, for instance

on sdm845-db845c (Qualcomm RB3 board), will result in stream pointer

NULL dereference:

Unable to handle kernel NULL pointer dereference at virtual

address 0000000000000020

Mem abort info:

ESR = 0x0000000096000004

EC = 0x25: DABT (current EL), IL = 32 bits

SET = 0, FnV = 0

EA = 0, S1PTW = 0

FSC = 0x04: level 0 translation fault

Data abort info:

ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000

CM = 0, WnR = 0, TnD = 0, TagAccess = 0

GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0

user pgtable: 4k pages, 48-bit VAs, pgdp=0000000101ecf000

[0000000000000020] pgd=0000000000000000, p4d=0000000000000000

Inter

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References