CVE-2024-53199
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Summary
CVE-2024-53199 is a newly identified vulnerability in the Linux kernel. Specifically, in the ASoC (Advanced Sound Architecture) subsystem, the function imx_audmix_probe contains an issue. The function devm_kasprintf(), which is used within imx_audmix_probe, can return a NULL pointer if it fails. However, this potential NULL return value is not checked in imx_audmix_probe, leading to a kernel NULL pointer dereference error if devm_kasprintf fails. The vulnerability has been addressed by adding a NULL check in imx_audmix_probe to prevent such dereferencing errors.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX