CVE-2022-50115

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory corruption issue has been identified in the Linux kernel, specifically in the ASoC: SOF: ipc3-topology component. The problem arises from the double freeing of ipc control data via load bytes, which occurs when sanity checks for byte controls fail, and the locally allocated scontrol->ipc control data is freed but not set to NULL. On the error rollback path, higher-level code attempts to free scontrol->ipc control data again, leading to memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.