CVE-2024-50205

A flaw was found in the Linux kernel's ALSA FireWire library. A division-by-zero vulnerability exists within the apply_constraint_to_size() function, where a step variable can remain zero, leading to a system crash. This can allow a local attacker to cause a Denial of Service (DoS) by triggering the vulnerable code path.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the firewire-snd kernel module from loading. Create a file named /etc/modprobe.d/disable-firewire-snd.conf with the content blacklist firewire-snd. A system reboot is required for this change to take effect. This action may impact functionality relying on FireWire audio devices.