Curtis Malainey

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified) Description: A null pointer dereference issue exists in the Linux kernel. The problem arises from not checking the nullity of `cstream` in the `sof ipc msg data()` function, similar to the check performed in the `sof set stream data offset()` function. This can lead to a null pointer dereference when `sps->stream` is null. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.