CVE-2024-50011: ASoC: Intel: soc-acpi-intel-rpl-match: add missing empty item
In the Linux kernel, the following vulnerability has been resolved:
ASoC: Intel: soc-acpi-intel-rpl-match: add missing empty item
There is no linksnum in struct sndsocacpimach {}, and we test !link->numadr as a condition to end the loop in hdasdwmachineselect(). So an empty item in struct sndsocacpilinkadr array is required.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50011?
CVE-2024-50011 is considered to have a medium severity due to potential impacts on the Linux kernel functionality.
What versions of the Linux kernel are affected by CVE-2024-50011?
CVE-2024-50011 affects Linux kernel versions from 6.11 to 6.11.3 and version 6.12-rc1.
How do I fix CVE-2024-50011?
To fix CVE-2024-50011, upgrade to one of the patched versions such as 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.13-1.
What are the potential consequences of not addressing CVE-2024-50011?
Failing to address CVE-2024-50011 may lead to stability issues or unexpected behavior in audio subsystems managed by the Linux kernel.
Is there a specific configuration that exacerbates CVE-2024-50011?
Yes, configurations using Intel SOC devices in conjunction with affected kernel versions may exacerbate the impact of CVE-2024-50011.