CVE-2024-53199

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Dec 27, 2024
Updated: Jan 8, 2025
CWE ID 476

Summary

CVE-2024-53199 is a newly identified vulnerability in the Linux kernel. Specifically, in the ASoC (Advanced Sound Architecture) subsystem, the function imx_audmix_probe contains an issue. The function devm_kasprintf(), which is used within imx_audmix_probe, can return a NULL pointer if it fails. However, this potential NULL return value is not checked in imx_audmix_probe, leading to a kernel NULL pointer dereference error if devm_kasprintf fails. The vulnerability has been addressed by adding a NULL check in imx_audmix_probe to prevent such dereferencing errors.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share