Tracker / CVE-2024-39473
CVE-2024-39473
Medium 5.5
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension If a process module does not have base config extension then the same format applies to all of it's inputs and the process->base_config_ext is NULL, causing NULL dereference when specifically crafted topology and sequences used.
Affected products and versions
| linux | linux_kernel |
|---|---|
| linux | linux_kernel · … → 6.4 |
| linux | linux_kernel · 6.6 → 6.6.34 |
| linux | linux_kernel · 6.9 → 6.9.5 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.