PT-2024-29848 · Linux+5 · Linux Kernel+5

Published

2024-07-04

·

Updated

2025-09-29

·

CVE-2024-42298

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the ASoC component in the Linux kernel, specifically with the fsl qmc audio module. The problem arises because the devm kasprintf() function can return a NULL pointer on failure, but this returned value is not checked. This lack of checking can lead to a NULL pointer dereference, potentially causing a denial of service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_16880
ALT-PU-2024-11855
ALT-PU-2024-13979
BDU:2025-01456
CVE-2024-42298
MGASA-2024-0309
MGASA-2024-0310
OESA-2024-2124
SUSE-SU-2024:3194-1
SUSE-SU-2024:3195-1
SUSE-SU-2024:3383-1
SUSE-SU-2025:20044-1
SUSE-SU-2025:20047-1
USN-7154-1
USN-7154-2
USN-7155-1
USN-7156-1
USN-7196-1

Affected Products

Alt Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu