CVEvulnerability

CVE-2024-23196

4.7 MEDIUM Published 2024-02-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-02-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H
CVSS 3.1 ([email protected])
4.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-362, CWE-476

Description

A race condition was found in the Linux kernel's sound/hda device driver in snd_hdac_regmap_sync() function. This can result in a null pointer dereference issue, possibly leading to a kernel panic or denial of service issue.

Affected configurations

• linux linux kernel (<= 5.5.19) • linux linux kernel (>= 6.0 <= 6.4.16)

Related

Weakness · CWE (2)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
  • CWE-476 NULL Pointer Dereference weakness

References