CVE-2024-39491

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l56: Fix lifetime of cs_dsp instance The cs_dsp instance is initialized in the driver probe() so it should be freed in the driver remove(). Also fix a missing call to cs_dsp_remove() in the error path of cs35l56_hda_common_probe(). The call to cs_dsp_remove() was being done in the component unbind callback cs35l56_hda_unbind(). This meant that if the driver was unbound and then re-bound it would be using an uninitialized cs_dsp instance. It is best to initialize the cs_dsp instance in probe() so that it can return an error if it fails. The component binding API doesn't have any error handling so there's no way to handle a failure if cs_dsp was initialized in the bind.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/60d5e087e5f334475b032ad7e6ad849fb998f303
https://git.kernel.org/stable/c/9054c474f9c219e58a441e401c0e6e38fe713ff1
https://git.kernel.org/stable/c/d344873c4cbde249b7152d36a273bcc45864001e

Configurations

No configuration.

History

No history.

Information

Published : 2024-07-10 08:15

Updated : 2024-07-11 13:05

NVD link : CVE-2024-39491

Mitre link : CVE-2024-39491

CVE.ORG link : CVE-2024-39491

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2024-39491", "cveTags": [], "metrics": {}, "published": "2024-07-10T08:15:11.287", "references": [{"url": "https://git.kernel.org/stable/c/60d5e087e5f334475b032ad7e6ad849fb998f303", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/9054c474f9c219e58a441e401c0e6e38fe713ff1", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d344873c4cbde249b7152d36a273bcc45864001e", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Awaiting Analysis", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: hda: cs35l56: Fix lifetime of cs_dsp instance\n\nThe cs_dsp instance is initialized in the driver probe() so it\nshould be freed in the driver remove(). Also fix a missing call\nto cs_dsp_remove() in the error path of cs35l56_hda_common_probe().\n\nThe call to cs_dsp_remove() was being done in the component unbind\ncallback cs35l56_hda_unbind(). This meant that if the driver was\nunbound and then re-bound it would be using an uninitialized cs_dsp\ninstance.\n\nIt is best to initialize the cs_dsp instance in probe() so that it\ncan return an error if it fails. The component binding API doesn't\nhave any error handling so there's no way to handle a failure if\ncs_dsp was initialized in the bind."}, {"lang": "es", "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ALSA: hda: cs35l56: Correcci\u00f3n de duraci\u00f3n de la instancia cs_dsp La instancia cs_dsp se inicializa en el controlador probe() por lo que debe liberarse en el controlador remove(). Tambi\u00e9n corrija una llamada faltante a cs_dsp_remove() en la ruta de error de cs35l56_hda_common_probe(). La llamada a cs_dsp_remove() se realizaba en la devoluci\u00f3n de llamada de desvinculaci\u00f3n del componente cs35l56_hda_unbind(). Esto significaba que si el controlador no estaba vinculado y luego se volv\u00eda a vincular, estar\u00eda utilizando una instancia cs_dsp no inicializada. Es mejor inicializar la instancia cs_dsp en probe() para que pueda devolver un error si falla. La API de enlace de componentes no tiene ning\u00fan control de errores, por lo que no hay forma de controlar un error si cs_dsp se inicializ\u00f3 en el enlace."}], "lastModified": "2024-07-11T13:05:54.930", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}