In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs8409: Fix possible NULL dereference If snd_hda_gen_add_kctl fails to allocate memory and returns NULL, then NULL pointer dereference will occur in the next line. Since dolphin_fixups function is a hda_fixup function which is not supposed to return any errors, add simple check before dereference, ignore the fail. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/21dc97d5086fdabbe278786bb0a03cbf2e26c793 cve-icon cve-icon
https://git.kernel.org/stable/c/4e19aca8db696b6ba4dd8c73657405e15c695f14 cve-icon cve-icon
https://git.kernel.org/stable/c/8971fd61210d75fd2af225621cd2fcc87eb1847c cve-icon cve-icon
https://git.kernel.org/stable/c/a5dd71a8b849626f42d08a5e73d382f2016fc7bc cve-icon cve-icon
https://git.kernel.org/stable/c/c9bd4a82b4ed32c6d1c90500a52063e6e341517f cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024110747-CVE-2024-50160-d61e@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-50160 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-50160 cve-icon
History

Wed, 01 Oct 2025 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sun, 13 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00028}

 epss

{'score': 0.00029}

Sat, 16 Nov 2024 02:00:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Moderate

Wed, 13 Nov 2024 16:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-476
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Thu, 07 Nov 2024 09:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/cs8409: Fix possible NULL dereference If snd_hda_gen_add_kctl fails to allocate memory and returns NULL, then NULL pointer dereference will occur in the next line. Since dolphin_fixups function is a hda_fixup function which is not supposed to return any errors, add simple check before dereference, ignore the fail. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Title ALSA: hda/cs8409: Fix possible NULL dereference
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-11-07T09:31:37.095Z

Updated: 2025-10-01T20:27:12.494Z

Reserved: 2024-10-21T19:36:19.961Z

Link: CVE-2024-50160

cve-icon Vulnrichment

Updated: 2025-10-01T15:18:24.650Z

cve-icon NVD

Status : Modified

Published: 2024-11-07T10:15:07.403

Modified: 2025-10-01T21:15:55.103

Link: CVE-2024-50160

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-11-07T00:00:00Z

Links: CVE-2024-50160 - Bugzilla