CVE-2024-46849

Summary

CVE-2024-46849 is a use-after-free vulnerability in the Linux kernel's ASoC: meson: axg-card subsystem. The buffer 'card->dai_link' is reallocated in 'meson_card_reallocate_links()', causing a pointer to an old memory location to be used after the memory has been freed. This issue was discovered using the KASAN memory error detector and can lead to a read operation on a freed memory location. The vulnerability affects the snd_soc_meson_axg_sound_card driver and versions prior to a forthcoming patch. System compromises or crashes can occur if an attacker successfully exploits this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.