CVE-2024-27057
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
01/05/2024
Last modified:
18/09/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ASoC: SOF: ipc4-pcm: Workaround for crashed firmware on system suspend<br />
<br />
When the system is suspended while audio is active, the<br />
sof_ipc4_pcm_hw_free() is invoked to reset the pipelines since during<br />
suspend the DSP is turned off, streams will be re-started after resume.<br />
<br />
If the firmware crashes during while audio is running (or when we reset<br />
the stream before suspend) then the sof_ipc4_set_multi_pipeline_state()<br />
will fail with IPC error and the state change is interrupted.<br />
This will cause misalignment between the kernel and firmware state on next<br />
DSP boot resulting errors returned by firmware for IPC messages, eventually<br />
failing the audio resume.<br />
On stream close the errors are ignored so the kernel state will be<br />
corrected on the next DSP boot, so the second boot after the DSP panic.<br />
<br />
If sof_ipc4_trigger_pipelines() is called from sof_ipc4_pcm_hw_free() then<br />
state parameter is SOF_IPC4_PIPE_RESET and only in this case.<br />
<br />
Treat a forced pipeline reset similarly to how we treat a pcm_free by<br />
ignoring error on state sending to allow the kernel&#39;s state to be<br />
consistent with the state the firmware will have after the next boot.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.19 (including) | 6.6.23 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.7 (including) | 6.7.11 (excluding) |
| cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/3cac6eebea9b4bc5f041e157e45c76e212ad6759
- https://git.kernel.org/stable/c/c40aad7c81e5fba34b70123ed7ce3397fa62a4d2
- https://git.kernel.org/stable/c/d153e8b154f9746ac969c85a4e6474760453647c
- https://git.kernel.org/stable/c/3cac6eebea9b4bc5f041e157e45c76e212ad6759
- https://git.kernel.org/stable/c/c40aad7c81e5fba34b70123ed7ce3397fa62a4d2
- https://git.kernel.org/stable/c/d153e8b154f9746ac969c85a4e6474760453647c



