CVE-2022-50016

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null pointer dereference exists in the sound/soc/sof/intel/cnl.c module of the Linux kernel. The issue occurs when the system processes an IPC reply before the firmware has fully booted and sent a FW READY message. Because the reply data variable is only allocated after the FW READY message is received, processing a premature reply leads to a crash. This condition affects both IPC3 and IPC4 firmware and can be triggered by defective firmware, potentially resulting in a denial of service. The vulnerable functions include cnl ipc4 irq thread() and cnl ipc irq thread().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.