Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's ALSA Context-FI driver can lead to a kernel crash on the hw20k2 model. This issue arises from a recent refactoring of the xfi driver, which altered how digital audio interface (DAI) resources are assigned. The change inadvertently caused the driver to enumerate an SPDIF1 entry that is only relevant for the hw20k1 CTSB073X model, leading to a crash on hw20k2. The problem has been acknowledged and worked around in a previous commit, but this patch aims to properly address the root cause by excluding the incorrect SPDIF1 type from the enumeration process.
The vulnerability causes a kernel crash on the hw20k2 model, disrupting system operation and potentially leading to a denial of service.
Users can apply the patch included in the Linux kernel stable commit 75dc1980cf48826287e43dc7a49e310c6691f97e to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.