CVE-2024-27057

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
01/05/2024
Last modified:
18/09/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ASoC: SOF: ipc4-pcm: Workaround for crashed firmware on system suspend<br /> <br /> When the system is suspended while audio is active, the<br /> sof_ipc4_pcm_hw_free() is invoked to reset the pipelines since during<br /> suspend the DSP is turned off, streams will be re-started after resume.<br /> <br /> If the firmware crashes during while audio is running (or when we reset<br /> the stream before suspend) then the sof_ipc4_set_multi_pipeline_state()<br /> will fail with IPC error and the state change is interrupted.<br /> This will cause misalignment between the kernel and firmware state on next<br /> DSP boot resulting errors returned by firmware for IPC messages, eventually<br /> failing the audio resume.<br /> On stream close the errors are ignored so the kernel state will be<br /> corrected on the next DSP boot, so the second boot after the DSP panic.<br /> <br /> If sof_ipc4_trigger_pipelines() is called from sof_ipc4_pcm_hw_free() then<br /> state parameter is SOF_IPC4_PIPE_RESET and only in this case.<br /> <br /> Treat a forced pipeline reset similarly to how we treat a pcm_free by<br /> ignoring error on state sending to allow the kernel&amp;#39;s state to be<br /> consistent with the state the firmware will have after the next boot.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.19 (including) 6.6.23 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.7.11 (excluding)
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*