What happened
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix unbalanced module reference count strace_open() invokes try_module_get() which on success takes the module reference. If any follow up operation causes strace_open() to fail, the refcount shall be put down.
Affected versions
Linux: 0a5fb3cc28fda52c761775db2ccb7ccb954aee2a through before 3fcf670f023d47e4eb970fb886ee562b5bdfbee7 (git); 0a5fb3cc28fda52c761775db2ccb7ccb954aee2a through before 23ebd4ed5799340f1d2193195c97f61d39aa9899 (git); 0a5fb3cc28fda52c761775db2ccb7ccb954aee2a through before 60b396b2aeca303bc468937d2b44a82399f37b3c (git); 0a5fb3cc28fda52c761775db2ccb7ccb954aee2a through before d4fa6f94b91137e329ea3f5b360e140b227bb696 (git); 6.7 Fixed: See vendor advisory.
Why it matters
Review the vendor advisory and exposure of the affected product to determine operational impact.
Detection & mitigation
- Apply vendor-provided updates or mitigations.
- Review affected product exposure and access logs.
Public PoC references
No public PoC reference has passed the current publication threshold.