CVE-2022-50016 Information

Jun 19, 2025 cve

Description

In the Linux kernel the following vulnerability has been resolved:

ASoC: SOF: Intel: cnl: Do not process IPC reply before firmware boot

It is not yet clear but it is possible to create a firmware so broken that it will send a reply message before a FW_READY message (it is not yet clear if FW_READY will arrive later). Since the reply_data is allocated only after the FW_READY message this will lead to a NULL pointer dereference if not filtered out.

The issue was reported with IPC4 firmware but the same condition is present for IPC3.

Reference

https://git.kernel.org/stable/c/230f646085d17a008b609eb8fe8befb8811868f0 https://git.kernel.org/stable/c/acacd9eefd0def5a83244d88e5483b5f38ee7287

CNNVD-202506-2299 (Published: 2025-06-18)

Share on: