Denial of Service Risk in Linux Kernel's ASoC Component

CVE-2024-58077

Summary

A vulnerability exists in the ASoC component of the Linux kernel, specifically related to the improper handling of the soc_pcm_ret() function in the .prepare callback. This oversight could potentially allow an attacker to flood the syslog with error messages, leading to a denial-of-service condition by consuming excessive disk space and performance resources. The resolution involves ensuring that the soc_pcm_ret() function is not used in contexts where error messages are irrelevant or might expose the system to misuse, thus improving the overall stability and security of the audio subsystem.

References