CyberRota Analysis
AI-GeneratedThe Linux kernel's ALSA subsystem is vulnerable due to a lack of proper error handling in the cmipci driver, specifically in the snd_cmipci_spdif_controls function, which does not check for NULL return values from snd_ctl_new1(). This oversight can lead to a NULL pointer dereference, potentially causing system crashes or instability. Linux system administrators and developers utilizing affected kernel versions should prioritize applying the necessary patches to mitigate this risk.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: cmipci: check snd_ctl_new1() return value snd_ctl_new1() can return NULL when memory allocation fails. snd_cmipci_spdif_controls() does not check the return value before dereferencing kctl->id.device, which can lead to a NULL pointer dereference. Add NULL checks after snd_ctl_new1() calls and return -ENOMEM if any fails.