Linux Kernel ASoC Component Null Pointer Dereference Vulnerability

A vulnerability in the Linux kernel's ASoC (ALSA System on Chip) component can lead to a null pointer dereference. This issue arises when the 'codec_dai' variable, which is derived from the card's DAI (Digital Audio Interface) link, is accessed without proper validation. If the DAI link's 'num_codecs' is zero, 'codec_dai' becomes null, causing an out-of-bounds error. The vulnerability is triggered during the registration of sound cards, a process invoked by various platforms.

Impact

Exploitation of this vulnerability can cause a null pointer dereference, leading to a system crash or undefined behavior.