Skip to main content
VulnerabilityPublished Updated

CVE-2024-27057: Linux kernel · ASoC: SOF: ipc4-pcm: Workaround for crashed firmware on system suspend

Affects Linux kernelSource GCVE Database

0
Compare

Not known to be exploited.

Data as of 30 Oct 2026, 16:33 UTC

Severity
Medium

Rated Medium by Threat Radar's AI analysis · No CVSS score from NVD or the CNA

Thin evidence

One scorer or none

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 1 May 2024

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.

What to do

AI-suggested

A workaround has been implemented in the Linux kernel to handle this issue by ignoring errors during forced pipeline resets in the suspend path, ensuring kernel and firmware state consistency after DSP reboot. Users should apply the updated Linux kernel version containing this fix once available. No additional action is required beyond updating to the fixed kernel version.

Description

CVE-2024-27057 is a vulnerability in the Linux kernel's ASoC SOF ipc4-pcm component related to handling firmware crashes during system suspend when audio is active. The issue causes misalignment between kernel and firmware states on DSP reboot, leading to errors and audio resume failures. The fix involves a workaround that treats forced pipeline resets by ignoring certain errors to maintain state consistency.

References

Community reviews

Loading reviews…