CVE-2022-50015
Severity CVSS v4.0:
Pending analysis
Type:
CWE-476
NULL Pointer Dereference
Publication date:
18/06/2025
Last modified:
14/11/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot<br />
<br />
It is not yet clear, but it is possible to create a firmware so broken<br />
that it will send a reply message before a FW_READY message (it is not<br />
yet clear if FW_READY will arrive later).<br />
Since the reply_data is allocated only after the FW_READY message, this<br />
will lead to a NULL pointer dereference if not filtered out.<br />
<br />
The issue was reported with IPC4 firmware but the same condition is present<br />
for IPC3.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.2 (including) | 5.19.4 (excluding) |
To consult the complete list of CPE names with products and versions, see this page