CVE-2024-43818: ASoC: amd: Adjust error handling in case of absent codec device
In the Linux kernel, the following vulnerability has been resolved:
ASoC: amd: Adjust error handling in case of absent codec device
acpigetfirstphysicalnode() can return NULL in several cases (no such device, ACPI table error, reference count drop to 0, etc). Existing check just emit error message, but doesn't perform return. Then this NULL pointer is passed to devmacpidevadddrivergpios() where it is dereferenced.
Adjust this error handling by adding error code return.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43818?
The severity of CVE-2024-43818 is classified as a moderate vulnerability.
How do I fix CVE-2024-43818?
To fix CVE-2024-43818, update your Linux kernel to the specified remedied versions such as 5.10.223-1 or 6.1.128-1.
Which Linux kernel versions are affected by CVE-2024-43818?
CVE-2024-43818 affects Linux kernel versions between 6.0 and 6.6.44.
What types of devices are impacted by CVE-2024-43818?
CVE-2024-43818 impacts audio codecs that rely on the ASoC framework in the Linux kernel.
Is CVE-2024-43818 specific to a particular distribution?
CVE-2024-43818 has been specifically addressed in Debian packages of the Linux kernel.