CVE-2024-50105

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to the Linux kernel, specifically the ASoC: qcom: sc7280 component. A commit moved the allocation of Soundwire stream runtime from the Qualcomm Soundwire driver to individual machine sound card drivers, but forgot to update the SC7280 card. This results in a NULL pointer dereference or other effects of uninitialized memory accesses during sound playback, similar to an issue confirmed on SDM845.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.