Linux Kernel Intel ASoC AVS Component Name Pointer Use-After-Free Vulnerability

A use-after-free vulnerability has been addressed in the Linux kernel's ASoC Intel AVS component. The issue arose from directly sharing the 'name' pointer between components, which could lead to use-after-free errors when tearing down components. The vulnerability affects the ASoC framework, specifically in how component names are handled. The problem has been resolved by duplicating the name to prevent such errors. Additionally, the order of operations has been updated, as the framework previously did not override component names set before initialization, allowing for potential inconsistencies.

Impact

The vulnerability could lead to use-after-free errors, potentially allowing for memory corruption or exploitation through dangling pointers.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.