Linux Kernel ALSA PCM Null Pointer Dereference Vulnerability

A vulnerability in the Linux kernel's Advanced Linux Sound Architecture (ALSA) component allows for a null pointer dereference in the PCM (Pulse Code Modulation) subsystem. The issue arises because the pointer to the substream is dereferenced before it is checked for nullity, leading to potential instability. Although the PCM_RUNTIME_CHECK macro calls BUG_ON to handle such cases, it is still necessary to perform a pointer check before assigning the card pointer.

Impact

Exploitation of this vulnerability could lead to a null pointer dereference, causing a kernel crash and denial of service.