CVE-2024-58012

MediumCVSS 5.5/10Last modified Oct 21, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params

Each cpu DAI should associate with a widget. However, the topology might not create the right number of DAI widgets for aggregated amps. And it will cause NULL pointer deference. Check that the DAI widget associated with the CPU DAI is valid to prevent NULL pointer deference due to missing DAI widgets in topologies with aggregated amps.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 4c414da93a4642d02c67fbe82f1834be7bf586b7, < 2be324c89993c51c9554a84415604be098876d42; >= 4c414da93a4642d02c67fbe82f1834be7bf586b7, < e012a77e4d7632cf615ba9625b1600ed8985c3b5; >= 4c414da93a4642d02c67fbe82f1834be7bf586b7, < 789a2fbf0900982788408d3b0034e0e3f914fb3b; >= 4c414da93a4642d02c67fbe82f1834be7bf586b7, < 569922b82ca660f8b24e705f6cf674e6b1f99cc7
LinuxLinux5.7

References

Timeline

Published
Feb 27, 2025
Last modified
Oct 21, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-580137.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitoCVE-2024-580147.1In the Linux kernel, the following vulnerability has been resolved: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy()CVE-2024-580157.1In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix for out-of bound access error Selfgen stats are placCVE-2024-580165.5In the Linux kernel, the following vulnerability has been resolved: safesetid: check size of policy writes syzbot attempts to write a buffCVE-2024-580175.5In the Linux kernel, the following vulnerability has been resolved: printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX ShifCVE-2024-580185.5In the Linux kernel, the following vulnerability has been resolved: nvkm: correctly calculate the available space of the GSP cmdq buffer rCVE-2024-580195.5In the Linux kernel, the following vulnerability has been resolved: nvkm/gsp: correctly advance the read pointer of GSP message queue A GSCVE-2024-58024.8The URL Shortener by Myhop WordPress plugin through 1.0.17 does not sanitise and escape some of its settings, which could allow high privileCVE-2024-580205.5In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Add NULL check in mt_input_configured devm_kasprintf(CVE-2024-580215.5In the Linux kernel, the following vulnerability has been resolved: HID: winwing: Add NULL check in winwing_init_led() devm_kasprintf() caCVE-2024-580225.5In the Linux kernel, the following vulnerability has been resolved: mailbox: th1520: Fix a NULL vs IS_ERR() bug The devm_ioremap() functioCVE-2024-580238.4Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive information.