CVE-2022-50015

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null pointer dereference exists in the Linux kernel within the sound/soc/sof/intel/hda-ipc.c module. The issue occurs when the system processes an IPC reply message before receiving a FW READY message during firmware boot. Because the reply data variable is only allocated after the FW READY message is received, processing a premature reply leads to a crash. This condition affects both IPC3 and IPC4 firmware and can be triggered by malformed firmware, potentially resulting in a denial of service. The vulnerable functions are hda dsp ipc4 irq thread() and hda dsp ipc irq thread().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.