Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()

A devm_kzalloc() in asoc_qcom_lpass_cpu_platform_probe() could
possibly return NULL pointer. NULL Pointer Dereference may be
triggerred without addtional check.
Add a NULL check for the returned pointer.

Classification

CVE ID: CVE-2024-50103

Affected Products

Vendor: Linux

Product: Linux

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 10.17% (scored less or equal to compared to others)

EPSS Date: 2025-06-02 (when was this score calculated)

References

https://nvd.nist.gov/vuln/detail/CVE-2024-50103
https://git.kernel.org/stable/c/03c9c2c2d2d0fe203dfe8f56bedbcf04e303d7c4
https://git.kernel.org/stable/c/a8e691fe1894c8bdf815a6171ee22ae7da8b18aa
https://git.kernel.org/stable/c/e19bf49e903337641fc230d430d49813e3199902
https://git.kernel.org/stable/c/73cc3f905ca9aa95694eea3dfa1acadc90686368
https://git.kernel.org/stable/c/1e235d02d803660777ec911a2c467ae41f8539f5
https://git.kernel.org/stable/c/49da1463c9e3d2082276c3e0e2a8b65a88711cd2

Timeline