CVE-2024-41069

Updated: 2025-11-10 02:51:52.424032

Description:

In the Linux kernel, the following vulnerability has been resolved: ASoC: topology: Fix references to freed memory Most users after parsing a topology file, release memory used by it, so having pointer references directly into topology file contents is wrong. Use devm_kmemdup(), to allocate memory as needed.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x HIGH 7.8

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 7.8 HIGH Released CLSA-2025:1759866837 2025-10-08 04:09:26
CentOS 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2025-09-30 05:11:53
CentOS 7 ELS kernel 3.10.0 7.8 HIGH Released CLSA-2025:1759431860 2025-10-15 20:25:50
CentOS 8.4 ELS kernel 4.18.0 7.8 HIGH Needs Triage 2025-09-28 08:03:18
CentOS 8.5 ELS kernel 4.18.0 7.8 HIGH Needs Triage 2025-09-28 08:03:17
CentOS Stream 8 ELS kernel 4.18.0 7.8 HIGH In Testing 2025-10-15 20:25:49
CloudLinux 7 ELS kernel 3.10.0 7.8 HIGH Ignored 2025-11-07 23:23:37 CL7 support is limited
Oracle Linux 6 ELS kernel 2.6.32 7.8 HIGH Not Vulnerable 2025-11-02 08:07:46
Oracle Linux 7 ELS kernel 3.10.0 7.8 HIGH Released CLSA-2025:1759431869 2025-10-02 23:06:38
Oracle Linux 7 ELS kernel-uek 5.4.17 7.8 HIGH Released CLSA-2025:1764085382 2025-11-25 21:48:11
Total: 15