CVE-2025-39938 ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed If earlier opening of source graph fails e.g. ADSP rejects due to incorrect audioreach topology, the graph is closed and "daidata-graphdai-id" is...

The vulnerability of the qcom/lpass.h component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the qcom/lpass.h component in the Linux operating system’s kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2025-40634

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the ASoC Qualcomm q6apm-lpass-dais component. Specifically, a NULL pointer dereference can occur if the initialization of the source graph fails...

UBUNTU-CVE-2025-37979

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix sc7280 lpass potential buffer overflow Case values introduced in commit 5f78e1fb7a3e "ASoC: qcom: Add driver support for audioreach solution" cause out of bounds access in arrays of sc7280 driver data e.g. in case...

PT-2025-22240

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential buffer overflow issue has been identified in the Linux kernel, specifically in the ASoC qcom sc7280 lpass driver. This issue arises from case values introduced in a commit,...

The vulnerability of the `__lpass_get_dmactl_handle` function in the qcom component of the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the lpassgetdmactlhandle function in the qcom component of the Linux operating system is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()

...

SUSE CVE-2024-50103

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix NULL Dereference in asocqcomlpasscpuplatformprobe A devmkzalloc in asocqcomlpasscpuplatformprobe could possibly return NULL pointer. NULL Pointer Dereference may be triggerred without addtional check. Add a NULL...

AZL-52455 CVE-2024-50103 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix NULL Dereference in asocqcomlpasscpuplatformprobe A devmkzalloc in asocqcomlpasscpuplatformprobe could possibly return NULL pointer. NULL Pointer Dereference may be triggerred without addtional check. Add a NULL...

AZL-52441 CVE-2024-50103 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix NULL Dereference in asocqcomlpasscpuplatformprobe A devmkzalloc in asocqcomlpasscpuplatformprobe could possibly return NULL pointer. NULL Pointer Dereference may be triggerred without addtional check. Add a NULL...

UBUNTU-CVE-2024-50103

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix NULL Dereference in asocqcomlpasscpuplatformprobe A devmkzalloc in asocqcomlpasscpuplatformprobe could possibly return NULL pointer. NULL Pointer Dereference may be triggerred without addtional check. Add a NULL...

CVE-2024-26799

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix uninitialized pointer dmactl In the case where lpassgetdmactlhandle is called and the driver id daiid is invalid the pointer dmactl is not being assigned a value, and dmactl contains a garbage value since it has n...