VDB
DEBIAN-CVE-2024-50160
DEBIAN-CVE-2024-50160
PUBLISHED
CVSS 5.5 MEDIUM
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs8409: Fix possible NULL dereference If snd_hda_gen_add_kctl fails to allocate memory and returns NULL, then NULL pointer dereference will occur in the next line. Since dolphin_fixups function is a hda_fixup function which is not supposed to return any errors, add simple check before dereference, ignore the fail. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Risk Scores
CVSS v3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | linux | 0, 0 |
| Debian:11 | linux-6.1 | *, 6.1.106-3, 6.1.112-1 |
| Debian:14 | linux | 0, 0 |
| Debian:12 | linux | 6.1.64-1, 6.1.38-4, 6.1.106-2 |
Timeline
- Nov 7, 2024 CVE Published
- Apr 28, 2026 CVE Updated