Linux Kernel Asymmetric Stream Handling Vulnerability in ASoC DPCM Component

A vulnerability in the Linux kernel's ASoC DPCM component can lead to a NULL dereference. This issue arises when the DPCM module adds valid Back-End (BE) connections without verifying if the selected BE supports the given stream direction. In cases of asymmetric BE streams, this can result in incorrect BE selection, causing a NULL dereference later in the process when the code expects a corresponding BE substream to exist. The vulnerability affects several versions of the Linux kernel.

Impact

The vulnerability can cause a NULL dereference, leading to a potential system crash or instability.

Remediation

The vulnerability has been addressed in the official Linux kernel repository. Users should upgrade to the latest stable version of the Linux kernel where this vulnerability has been fixed.