VULNERABILITY INTELLIGENCE

CVE-2024-38551

CVSS score5.5 MEDIUM
EPSS probability0.24%
CISA KEVNot currently listed
Published2024-06-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: Assign dummy when codec not specified for a DAI link MediaTek sound card drivers are checking whether a DAI link is present and used on a board to assign the correct parameters and this is done by checking the codec DAI names at probe time. If no real codec is present, assign the dummy codec to the DAI link to avoid NULL pointer during string comparison.

Weakness classification

  • nvd@nist.gov: CWE-476

Primary references