What is CVE-2024-57805?

CVE-2024-57805 is a medium-severity vulnerability in Linux. CVSS score: 5.5/10. Published 2025-01-11.

How severe is CVE-2024-57805?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Is CVE-2024-57805 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Linux

CVE-2024-57805

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP The linkDMA should not be released on stop trigger since a stream re-start might happen without closing of the stream. This leaves a short time for other streams to 'steal' the linkDMA since it has been released. This issue is not easy to reproduce under normal conditions as usually after stop the stream is closed, or the same stream is restarted, but if another stream got in between the stop and start, like this: aplay -Dhw:0,3 -c2 -r48000 -fS32_LE /dev/zero -d 120 CTRL+z aplay -Dhw:0,0 -c2 -r48000 -fS32_LE /dev/zero -d 120 then the link DMA channels will be mixed up, resulting firmware error or crash.

EPSS: 0.002 (6.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Linux — versions ec0c7735dd014e54e55bc3bf4ed2e73d56bb00b3, 6.11.6, 6.12
Linux Linux_kernel — versions 6.12, 6.13

Public proof-of-concept exploits

oogasawa/Utility-security

References

416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)

Frequently asked questions

What is CVE-2024-57805?: CVE-2024-57805 is a medium-severity vulnerability in Linux. CVSS score: 5.5/10. Published 2025-01-11.
How severe is CVE-2024-57805?: Medium severity. CVSS v3 base score is 5.5 out of 10.
Is CVE-2024-57805 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.