CVE-2024-41037

A vulnerability was found in the Linux kernel, affecting Intel platforms using HDA DMA to manage the link DMA. When the system enters a suspend mode with an active stream, it can trigger a chain of function calls including hda_dai_suspend(), which calls the function hda_link_dma_cleanup() that clears the hext_stream->link_substream. However, afterwards the hda_ipc4_post_trigger() function is called and attempts to use the now-cleared snd_pcm_susbtream pointer, causing a NULL pointer dereference, potentially leading to system instability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.