CVE-2024-56532

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: us122l: Use snd_card_free_when_closed() at disconnection

The USB disconnect callback is supposed to be short and not too-long waiting. OTOH, the current code uses snd_card_free() at disconnection, but this waits for the close of all used fds, hence it can take long. It eventually blocks the upper layer USB ioctls, which may trigger a soft lockup.

An easy workaround is to replace snd_card_free() with snd_card_free_when_closed(). This variant returns immediately while the release of resources is done asynchronously by the card device release at the last close.

The loop of us122l->mmap_count check is dropped as well. The check is useless for the asynchronous operation with *_when_closed().

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

VendorProductVersions
LinuxLinux>= 030a07e441296c372f946cd4065b5d831d8dc40c, < 020cbc4d7414f0962004213e2b7bc5cc607e9ec7; >= 030a07e441296c372f946cd4065b5d831d8dc40c, < 75f418b249d84021865eaa59515d3ed9b75ce4d6; >= 030a07e441296c372f946cd4065b5d831d8dc40c, < bf0aa35a7cb8602cccf2387712114e836f65c154; >= 030a07e441296c372f946cd4065b5d831d8dc40c, < 9a48bd2184b142c92a4e17eac074c61fcf975bc9; >= 030a07e441296c372f946cd4065b5d831d8dc40c, < bc778ad3e495333eebda36fe91d5b2c93109cc16; >= 030a07e441296c372f946cd4065b5d831d8dc40c, < 2938dd2648522336133c151dd67bb9bf01cbd390; >= 030a07e441296c372f946cd4065b5d831d8dc40c, < 9b27924dc8d7f8a8c35e521287d4ccb9a006e597; >= 030a07e441296c372f946cd4065b5d831d8dc40c, < 9d5c530e4d70f64b1114f2cc29ac690ba7ac4a38; >= 030a07e441296c372f946cd4065b5d831d8dc40c, < b7df09bb348016943f56b09dcaafe221e3f73947
LinuxLinux2.6.28

References

Timeline

Published
Dec 27, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-565335.5In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: Use snd_card_free_when_closed() at disconnection The USB CVE-2024-565345.5In the Linux kernel, the following vulnerability has been resolved: isofs: avoid memory leak in iocharset A memleak was found as below: uCVE-2024-565355.5In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: coex: check NULL return of kmalloc in btc_fw_set_monreg() CVE-2024-565365.5In the Linux kernel, the following vulnerability has been resolved: wifi: cw1200: Fix potential NULL dereference A recent refactoring was CVE-2024-565375.5In the Linux kernel, the following vulnerability has been resolved: drm: xlnx: zynqmp_disp: layer may be null while releasing layer->info CVE-2024-565387.8In the Linux kernel, the following vulnerability has been resolved: drm: zynqmp_kms: Unplug DRM device before removal Prevent userspace acCVE-2024-565395.5In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_conCVE-2024-56546.5The CF7 Google Sheets Connector plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check onCVE-2024-565404.7In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Prevent recovery invocation during probe and resume RefactCVE-2024-565417.8In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix use-after-free in ath12k_dp_cc_cleanup() During ath1CVE-2024-565425.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix a memleak issue when driver is removed Running "mCVE-2024-565435.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Skip Rx TID cleanup for self peer During peer create, dp
CVE-2024-56532: Medium severity, CVSS 5.5 | Vulnix