CVE-2024-39473

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a null pointer dereference in the sof ipc4 get input pin audio fmt() function in the sound/soc/sof/ipc4-topology.c module of the Linux kernel. This occurs when a process module does not have a base config extension, causing the process->base config ext to be NULL. The vulnerability can be exploited by using specifically crafted topology and sequences, potentially leading to a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.