CVE-2024-46798

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a use-after-free bug in the Linux kernel, specifically in the ASoC: dapm component. When the system is suspended, the snd pcm suspend all() function accesses a freed snd soc pcm runtime object, leading to a use-after-free bug. The snd pcm sync stop() function has a NULL check on substream->runtime before making any access, so it is necessary to always set substream->runtime to NULL every time it is freed using kfree().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.