Overview
About vulnerability
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Don’t allow pointer operations on unconfigured streams When reporting the pointer for a compressed stream we report the current I/O frame position by dividing the position by the number of channels multiplied by the number of container bytes. These values default to 0 and are only configured as part of setting the stream parameters so this allows a divide by zero to be configured. Validate that they are non zero, returning an error if not A flaw was found in the Linux kernel’s Advanced Linux Sound Architecture (ALSA) System on Chip (ASoC) Sound Open Firmware (SOF) subsystem. This vulnerability occurs when reporting the pointer for a compressed stream, where the I/O frame position is divided by values that can be zero if the stream parameters are unconfigured. An attacker could potentially trigger a divide-by-zero error, leading to a system crash and a denial of service.Details
KernelCare state
Live-patch status from KernelCare for each operating system.
| Operating system | Status | Covered kernels |
|---|---|---|
| Debian 12 | Planned | — |
| Debian 13 | Will Not Fix |
7 kernels
|
| Ubuntu 24.04 | Planned | — |