The Linux kernel vulnerability in the ASoC SOF (Sound Open Firmware) subsystem involved improper handling of pointer operations on unconfigured compressed audio streams. Specifically, when reporting the pointer for a compressed stream, the current I/O frame position is calculated by dividing the position by the product of the number of channels and container bytes. Since these parameters default to zero before stream configuration, this division could cause a divide-by-zero error. The fix enforces validation to confirm these values are non-zero, returning an error if they are not, thereby preventing the divide-by-zero condition.

This vulnerability can cause a denial of service (DoS) by triggering a kernel crash due to a divide-by-zero error when handling unconfigured compressed audio streams. There is no indication of confidentiality or integrity impact. The CVSS vector indicates local attack vector with low complexity and low privileges required, no user interaction, and only availability impact.

A fix is available in Linux kernel versions 7.0.0-28.28.1 and later. Users should update to these or later versions to remediate the vulnerability. Since this is not a cloud service, manual patching is required. There are no vendor advisories indicating no action is needed.