CVE-2024-57800
ALSA: memalloc: prefer dma_mapping_error() over explicit address checking
Reported by linux · Published January 11, 2025
In the Linux kernel, the following vulnerability has been resolved: ALSA: memalloc: prefer dma_mapping_error() over explicit address checking With CONFIG_DMA_API_DEBUG enabled, the following warning is observed: DMA-API: snd_hda_intel 0000:03:00.1: device driver failed to check map error[device address=0x00000000ffff0000] [size=20480 bytes] [mapped as single] WARNING: CPU: 28 PID: 2255 at kernel/dma/debug.c:1036 check_unmap+0x1408/0x2430 CPU: 28 UID: 42 PID: 2255 Comm: wireplumber Tainted: G W L 6.12.0-10-133577cad6bf48e5a7848c4338124081393bfe8a+ #759 debug_dma_unmap_page+0xe9/0xf0 snd_dma_wc_free+0x85/0x130 [snd_pcm] snd_pcm_lib_free_pages+0x1e3/0x440 [snd_pcm] snd_pcm_common_ioctl+0x1c9a/0x2960 [snd_pcm] snd_pcm_ioctl+0x6a/0xc0 [snd_pcm] ... Check for returned DMA addresses using specialized dma_mapping_error() helper which is generally recommended for this purpose by Documentation/core-api/dma-api.rst.
EPSS 0.21% · 11.4th percentile
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| linux_kernel | linux | 6.12.8 |
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | c880a5146642e9d35f88aaa353ae98ffd4fc3f99, c880a5146642e9d35f88aaa353ae98ffd4fc3f99 |
| Linux | Linux | 6.12, 0, 6.12.8 |
| linux | linux_kernel | 6.12, 6.12 |
| Linux | Linux | *, 6.12, 0 |
Timeline
- Jan 11, 2025 CVE Published
- Jan 12, 2025 EPSS Score (30 in total, the first dated here)
- Jun 4, 2025 Coalition ESS Score (5 in total, the first dated here)
- Dec 29, 2025 Security Advisory (116 in total, the first dated here)
- Dec 29, 2025 CVE Updated
- Oct 21, 2026 Distribution Patch (101 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2024-57800
vulnetix vdb fixes CVE-2024-57800Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-57800/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart