Executive Summary

Informations
Name CVE-2024-50292 First vendor Publication 2024-11-19
Vendor Cve Last vendor Modification 2025-01-07

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Overall CVSS Score 5.5
Base Score 5.5 Environmental Score 5.5
impact SubScore 3.6 Temporal Score 5.5
Exploitabality Sub Score 1.8
 
Attack Vector Local Attack Complexity Low
Privileges Required Low User Interaction None
Scope Unchanged Confidentiality Impact None
Integrity Impact None Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

In the Linux kernel, the following vulnerability has been resolved:

ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove

In case of error when requesting ctrl_chan DMA channel, ctrl_chan is not null. So the release of the dma channel leads to the following issue: [ 4.879000] st,stm32-spdifrx 500d0000.audio-controller: dma_request_slave_channel error -19 [ 4.888975] Unable to handle kernel NULL pointer dereference at virtual address 000000000000003d [...] [ 5.096577] Call trace: [ 5.099099] dma_release_channel+0x24/0x100 [ 5.103235] stm32_spdifrx_remove+0x24/0x60 [snd_soc_stm32_spdifrx] [ 5.109494] stm32_spdifrx_probe+0x320/0x4c4 [snd_soc_stm32_spdifrx]

To avoid this issue, release channel only if the pointer is valid.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50292

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-476 NULL Pointer Dereference

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 8
Os 3698

Sources (Detail)

https://git.kernel.org/stable/c/0d75f887aabd80cf37ea48d28f159afa7850ea28
https://git.kernel.org/stable/c/22ae9321054cf7f36c537702af133659f51a0b88
https://git.kernel.org/stable/c/23bdbd1ef3e063e03d3c50c15a591b005ebbae39
https://git.kernel.org/stable/c/3a977b554f668382dfba31fd62e4cce4fe5643db
https://git.kernel.org/stable/c/4f1d74f74752eab8af6b8b28797dc6490d57374c
https://git.kernel.org/stable/c/9bb4af400c386374ab1047df44c508512c08c31f
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
Date Informations
2025-06-26 02:37:12
  • Multiple Updates
2025-06-25 12:35:36
  • Multiple Updates
2025-06-24 02:41:52
  • Multiple Updates
2025-05-27 02:46:55
  • Multiple Updates
2025-03-29 03:43:07
  • Multiple Updates
2025-03-28 13:46:49
  • Multiple Updates
2025-03-28 03:20:51
  • Multiple Updates
2025-03-19 03:16:00
  • Multiple Updates
2025-03-18 03:28:58
  • Multiple Updates
2025-03-14 03:16:10
  • Multiple Updates
2025-03-06 14:12:44
  • Multiple Updates
2025-02-22 03:26:17
  • Multiple Updates
2025-01-08 00:21:02
  • Multiple Updates
2025-01-07 21:20:54
  • Multiple Updates
2024-11-20 03:02:01
  • Multiple Updates
2024-11-20 03:01:14
  • Multiple Updates
2024-11-20 00:20:28
  • Multiple Updates
2024-11-19 09:20:29
  • First insertion