CVE-2024-51565

The hda driver is vulnerable to a buffer over-read from a guest-controlled value...

CVE-2024-51565

The hda driver in the bhyve hypervisor is vulnerable to a buffer over-read caused by a guest-controlled value. This flaw allows a malicious guest virtual machine to perform a denial of service (DoS) attack against the host or read memory within the bhyve process that should be inaccessible. This ...

CVE-2024-51565 bhyve(8) hda driver buffer over-read

The hda driver is vulnerable to a buffer over-read from a guest-controlled value...

CVE-2024-51565 bhyve(8) hda driver buffer over-read

The hda driver is vulnerable to a buffer over-read from a guest-controlled value...

CVE-2024-51564

A guest can trigger an infinite loop in the hda audio driver...

CVE-2024-51564

The bhyve hypervisor in FreeBSD contains a vulnerability in the hda audio driver where a guest can trigger an infinite loop . This flaw could allow a malicious guest virtual machine to perform a denial of service (DoS) against the bhyve host or potentially read restricted memory within the bhyve ...

kernel: ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/csdspctl: Use privatefree for control cleanup Use the control privatefree callback to free the associated data block. This ensures that the memory won't leak, whatever way the control gets destroyed. The original...

PT-2024-34709 · Unknown +1 · Hda Driver +1

Name of the Vulnerable Software and Affected Versions: hda driver affected versions not specified Description: The issue concerns a buffer over-read in the hda driver, which is triggered by a guest-controlled value. This allows for potential exploitation. No information is provided about the...

CVE-2024-51564: Improper Validation of Specified Index, Position, or Offset in Input

A guest can trigger an infinite loop in the hda audio driver...

CVE-2024-51565: Out-of-bounds Read

The hda driver is vulnerable to a buffer over-read from a guest-controlled value...

SUSE CVE-2024-50160

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs8409: Fix possible NULL dereference If sndhdagenaddkctl fails to allocate memory and returns NULL, then NULL pointer dereference will occur in the next line. Since dolphinfixups function is a hdafixup function which i...

AZL-52956 CVE-2024-50160 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs8409: Fix possible NULL dereference If sndhdagenaddkctl fails to allocate memory and returns NULL, then NULL pointer dereference will occur in the next line. Since dolphinfixups function is a hdafixup function which i...

AZL-52975 CVE-2024-50160 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs8409: Fix possible NULL dereference If sndhdagenaddkctl fails to allocate memory and returns NULL, then NULL pointer dereference will occur in the next line. Since dolphinfixups function is a hdafixup function which i...

UBUNTU-CVE-2024-50160

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs8409: Fix possible NULL dereference If sndhdagenaddkctl fails to allocate memory and returns NULL, then NULL pointer dereference will occur in the next line. Since dolphinfixups function is a hdafixup function which i...

CVE-2024-50160 ALSA: hda/cs8409: Fix possible NULL dereference

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs8409: Fix possible NULL dereference If sndhdagenaddkctl fails to allocate memory and returns NULL, then NULL pointer dereference will occur in the next line. Since dolphinfixups function is a hdafixup function which i...

CVE-2024-50160

In CVE-2024-50160, the Linux kernel ALSA hda/cs8409 driver could dereference NULL if snd_hda_gen_add_kctl failed to allocate memory, leading to a NULL pointer dereference. The fix adds a pre-dereference check in the dolphin_fixups hda_fixup path (which is not supposed to return errors) and ignore...

CVE-2024-50160 ALSA: hda/cs8409: Fix possible NULL dereference

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs8409: Fix possible NULL dereference If sndhdagenaddkctl fails to allocate memory and returns NULL, then NULL pointer dereference will occur in the next line. Since dolphinfixups function is a hdafixup function which i...

PT-2024-33992

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A NULL pointer dereference issue has been resolved in the Linux kernel. The problem occurs when the snd hda gen add kctl function fails to allocate memory and returns NULL, leading to ...

CVE-2024-50160: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs8409: Fix possible NULL dereference If sndhdagenaddkctl fails to allocate memory and returns NULL, then NULL pointer dereference will occur in the next line. Since dolphinfixups function is a hdafixup function which i...

FreeBSD -- Multiple issues in the bhyve hypervisor

Problem Description: Several vulnerabilities were found in the bhyve hypervisor's device models. The NVMe driver function nvmeopcgetlogpage is vulnerable to a buffer over- read from a guest-controlled value. CVE-2024-51562 The virtiovqrecordon function is subject to a time-of-check to time-of-use...