CVE-2024-38388

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-38388
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup Use the control private_free callback to free the associated data block. This ensures that the memory won't leak, whatever way the control gets destroyed. The original implementation didn't actually remove the ALSA controls in hda_cs_dsp_control_remove(). It only freed the internal tracking structure. This meant it was possible to remove/unload the amp driver while leaving its ALSA controls still present in the soundcard. Obviously attempting to access them could cause segfaults or at least dereferencing stale pointers.

3.3 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/172811e3a557d8681a5e2d0f871dc04a2d17eb13 Patch
https://git.kernel.org/stable/c/191dc1b2ff0fb35e7aff15a53224837637df8bff Patch
https://git.kernel.org/stable/c/3291486af5636540980ea55bae985f3eaa5b0740 Patch
https://git.kernel.org/stable/c/6e359be4975006ff72818e79dad8fe48293f2eb2 Patch
https://git.kernel.org/stable/c/172811e3a557d8681a5e2d0f871dc04a2d17eb13 Patch
https://git.kernel.org/stable/c/191dc1b2ff0fb35e7aff15a53224837637df8bff Patch
https://git.kernel.org/stable/c/3291486af5636540980ea55bae985f3eaa5b0740 Patch
https://git.kernel.org/stable/c/6e359be4975006ff72818e79dad8fe48293f2eb2 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

01 Apr 2025, 18:28

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-401
References () https://git.kernel.org/stable/c/172811e3a557d8681a5e2d0f871dc04a2d17eb13 - () https://git.kernel.org/stable/c/172811e3a557d8681a5e2d0f871dc04a2d17eb13 - Patch
References () https://git.kernel.org/stable/c/191dc1b2ff0fb35e7aff15a53224837637df8bff - () https://git.kernel.org/stable/c/191dc1b2ff0fb35e7aff15a53224837637df8bff - Patch
References () https://git.kernel.org/stable/c/3291486af5636540980ea55bae985f3eaa5b0740 - () https://git.kernel.org/stable/c/3291486af5636540980ea55bae985f3eaa5b0740 - Patch
References () https://git.kernel.org/stable/c/6e359be4975006ff72818e79dad8fe48293f2eb2 - () https://git.kernel.org/stable/c/6e359be4975006ff72818e79dad8fe48293f2eb2 - Patch

21 Nov 2024, 09:25

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/172811e3a557d8681a5e2d0f871dc04a2d17eb13 - () https://git.kernel.org/stable/c/172811e3a557d8681a5e2d0f871dc04a2d17eb13 -
References () https://git.kernel.org/stable/c/191dc1b2ff0fb35e7aff15a53224837637df8bff - () https://git.kernel.org/stable/c/191dc1b2ff0fb35e7aff15a53224837637df8bff -
References () https://git.kernel.org/stable/c/3291486af5636540980ea55bae985f3eaa5b0740 - () https://git.kernel.org/stable/c/3291486af5636540980ea55bae985f3eaa5b0740 -
References () https://git.kernel.org/stable/c/6e359be4975006ff72818e79dad8fe48293f2eb2 - () https://git.kernel.org/stable/c/6e359be4975006ff72818e79dad8fe48293f2eb2 -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ALSA: hda/cs_dsp_ctl: use private_free para la limpieza del control. Use la devolución de llamada de control private_free para liberar el bloque de datos asociado. Esto garantiza que la memoria no se pierda, sea cual sea la forma en que se destruya el control. La implementación original en realidad no eliminó los controles ALSA en hda_cs_dsp_control_remove(). Sólo liberó la estructura de seguimiento interna. Esto significaba que era posible quitar/descargar el controlador del amplificador dejando sus controles ALSA todavía presentes en la tarjeta de sonido. Obviamente, intentar acceder a ellos podría provocar errores de segmentación o al menos eliminar la referencia a punteros obsoletos.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 3.3

21 Jun 2024, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-21 11:15

Updated : 2025-04-01 18:28

NVD link : CVE-2024-38388

Mitre link : CVE-2024-38388

CVE.ORG link : CVE-2024-38388

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime