CVE-2024-40964

{"id": "CVE-2024-40964", "cveTags": [], "metrics": {}, "published": "2024-07-12T13:15:18.310", "references": [{"url": "https://git.kernel.org/stable/c/19be722369c347f3af1c5848e303980ed040b819", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/6386682cdc8b41319c92fbbe421953e33a28840c", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/ff27bd8e17884f7cdefecb3f3817caadd6813dc0", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Awaiting Analysis", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind()\n\nThe cs35l41_hda_unbind() function clears the hda_component entry\nmatching it's index and then dereferences the codec pointer held in the\nfirst element of the hda_component array, this is an issue when the\ndevice index was 0.\n\nInstead use the codec pointer stashed in the cs35l41_hda structure as it\nwill still be valid."}, {"lang": "es", "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ALSA: hda: cs35l41: Posible desreferencia del puntero nulo en cs35l41_hda_unbind() La funci\u00f3n cs35l41_hda_unbind() borra la entrada hda_component que coincide con su \u00edndice y luego desreferencia el puntero del c\u00f3dec contenido en el primer elemento de la matriz hda_component, esto es un problema cuando el \u00edndice del dispositivo era 0. En su lugar, utilice el puntero del c\u00f3dec escondido en la estructura cs35l41_hda, ya que seguir\u00e1 siendo v\u00e1lido."}], "lastModified": "2024-07-12T16:34:58.687", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}