PT-2023-34928 · Linux · Linux Kernel

Published

2023-02-13

·

Updated

2023-02-13

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.1.11
Description The issue is related to a potential null pointer dereference in the sof-audio component of the Linux Kernel. The problem arises when the swidget is not checked for NULL on sink failure in the prepare widgets function. This could potentially lead to security vulnerabilities, although the actual impact and attack plausibility have not been proven yet.
Recommendations For Linux Kernel versions prior to v6.1.11, update to version v6.1.11 or later to resolve the issue.

Related Identifiers

GSD-2023-1001852

Affected Products

Linux Kernel