What happened
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: avoid a NULL dereference with unsupported widgets If an IPC4 topology contains an unsupported widget, its .module_info field won't be set, then sof_ipc4_route_setup() will cause a kernel Oops trying to dereference it. Add a check for such cases.
Affected versions
Linux: 3acd527089463742a3dd95e274d53c2fdd834716 through before d42fe2721111138d7656d4f621f38c171979c8a0 (git); 3acd527089463742a3dd95e274d53c2fdd834716 through before 170818974e9732506195c6302743856cc8bdfd6f (git); 3acd527089463742a3dd95e274d53c2fdd834716 through before e3720f92e0237921da537e47a0b24e27899203f8 (git); 6.0 Fixed: See vendor advisory.
Why it matters
Review the vendor advisory and exposure of the affected product to determine operational impact.
Detection & mitigation
- Apply vendor-provided updates or mitigations.
- Review affected product exposure and access logs.
Public PoC references
No public PoC reference has passed the current publication threshold.