Use-After-Free Bug in snd_pcm_suspend_all() in Linux Kernel

CVE-2024-46798

What is CVE-2024-46798?

A vulnerability within the Linux kernel affects the snd_soc_pcm_runtime object, primarily occurring when the kernel's configuration includes specific KASAN settings. The flaw manifests as a use-after-free issue during system suspension, where the snd_pcm_suspend_all function attempts to access a freed snd_soc_pcm_runtime object. This access can result in system errors, as indicated by kernel logs. The vulnerability highlights the necessity for proper memory management, specifically ensuring that the substream runtime is initialized to NULL upon deallocation. This critical update mitigates potential risks to system stability and app functionality.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References