PT-2024-9230 · Linux+5 · Linux Kernel+5

Published 2024-05-08 · Updated 2025-09-29 · CVE-2024-39491

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to the incorrect handling of errors in the cs35l56 component of the Linux kernel. This can lead to a denial of service. The problem arises from the initialization of the cs dsp instance in the driver probe, which should be freed in the driver remove. A missing call to cs dsp remove() in the error path of cs35l56 hda common probe() is also fixed. The component binding API lacks error handling, making it impossible to handle failures if cs dsp was initialized in the bind.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

CWE-388

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

BDU:2024-10918

CVE-2024-39491

INFSA-2024_9315

OESA-2024-2076

RHSA-2024:9315

RHSA-2024_9315

SUSE-SU-2024:3194-1

SUSE-SU-2024:3195-1

SUSE-SU-2024:3383-1

SUSE-SU-2025:20044-1

SUSE-SU-2025:20047-1

USN-6999-1

USN-6999-2

USN-7004-1

USN-7005-1

USN-7005-2

USN-7008-1

USN-7029-1

Affected Products

Linuxmint

Linux Kernel

Red Hat

Red Os

Suse

Ubuntu

References · 1302

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/39xxx/CVE-2024-39491.json · Exploit
• https://ubuntu.com/security/CVE-2024-40957 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40984 · Vendor Advisory
• https://git.kernel.org/stable/c/d344873c4cbde249b7152d36a273bcc45864001e · Patch
• https://ubuntu.com/security/CVE-2024-41002 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-41030 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-39504 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2024-39491 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-38780 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-42230 · Security Note
• https://ubuntu.com/security/CVE-2024-38622 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-40921 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-41087 · Security Note
• https://ubuntu.com/security/CVE-2024-39489 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7029-1 · Vendor Advisory