PT-2024-32257 · Linux+1 · Linux Kernel+1

Published 2024-09-06 · Updated 2025-09-29 · CVE-2024-46863

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the Advanced Linux Sound Architecture (ALSA) System on Chip (SoC) Intel driver, specifically the soc-acpi-intel-lnl-match module. There is no links num in the struct snd soc acpi mach, and the code tests !link->num adr as a condition to end the loop in hda sdw machine select(). To fix this, an empty item in the struct snd soc acpi link adr array is required.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Validation of Array Index

Weakness Enumeration

CWE-129

Related Identifiers

ALSA-2025_16880

ALT-PU-2024-13979

ALT-PU-2024-14046

AZL-49887

AZL-49897

BDU:2025-04633

CVE-2024-46863

Affected Products

Alt Linux

Linux Kernel

References · 23

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46863.json · Exploit
• https://osv.dev/vulnerability/BELL-CVE-2024-46863 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-46863 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-46863 · Security Note
• https://git.kernel.org/stable/c/8eb57389d8ad91c67bf844f5aae4caef74b9091b · Patch
• https://osv.dev/vulnerability/AZL-49887 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-49897 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-46863 · Security Note
• https://bdu.fstec.ru/vul/2025-04633 · Security Note
• https://osv.dev/vulnerability/CVE-2024-46863 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46863 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-46863 · Vendor Advisory
• https://git.kernel.org/stable/c/c4246f1fe9f24f8dcd97887ed67d8fcfd91f4796 · Patch
• https://security-tracker.debian.org/tracker/CVE-2024-46863 · Vendor Advisory
• https://git.kernel.org/linus/c4246f1fe9f24f8dcd97887ed67d8fcfd91f4796 · Note