Linux Kernel NULL Pointer Dereference Vulnerability in ASoC SOF Intel HDA IPC

A vulnerability in the Linux kernel's ASoC SOF Intel HDA IPC component can lead to a NULL pointer dereference. This issue arises when a firmware response is sent before the FW_READY message is received. The vulnerability was reported with IPC4 firmware, but the same condition exists for IPC3. The reply_data is only allocated after the FW_READY message, so an unfiltered early reply can cause a NULL pointer dereference.

Impact

Exploitation of this vulnerability leads to a NULL pointer dereference, causing a crash or denial-of-service condition.