Threats tagged 'ghsa-2fqv-9f8v-r6j4'

CVE-2024-50103 addresses a NULL pointer dereference vulnerability in the Linux kernel's ASoC Qualcomm driver, specifically in the asoc_qcom_lpass_cpu_platform_probe() function. The issue arises because devm_kzalloc() may return a NULL pointer, which was not checked before use, potentially causing a kernel crash. This vulnerability has been fixed by adding a NULL pointer check.