CVE-2024-40964: ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind()

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-07-12 · updated 2026-06-17
Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind() The cs35l41_hda_unbind() function clears the hda_component entry matching it's index and then dereferences the codec pointer held in the first element of the hda_component array, this is an issue when the device index was 0. Instead use the codec pointer stashed in the cs35l41_hda structure as it will still be valid.

Affected products

Linux kernel: from 6.6 before 6.6.36; from 6.7 before 6.9.7; 6.10-rc1, 6.10-rc2, 6.10-rc3, 6.10-rc4 — fixed in 6.6.36, 6.9.7

How to fix

Upgrade to a fixed version: Linux kernel 6.6.36, 6.9.7. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-40964 or the next vulnerability affects your stack