Vulnerability in Linux

CVE-2023-54233

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: avoid a NULL dereference with unsupported widgets If an IPC4 topology contains an unsupported widget, its .module_info field won't be set, then sof_ipc4_route_setup() will cause a kernel Oops trying to dereference it. Add a check for such cases.

EPSS: 0.002 (5.2th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 3acd527089463742a3dd95e274d53c2fdd834716, 6.0, 0

References