https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 17:18:56 +0000 https://vulnerability.circl.lu/vuln/cve-2024-38388 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup</p> <p>Use the control private_free callback to free the associated data block. This ensures that the memory won&#39;t leak, whatever way the control gets destroyed.</p> <p>The original implementation didn&#39;t actually remove the ALSA controls in hda_cs_dsp_control_remove(). It only freed the internal tracking structure. This meant it was possible to remove/unload the amp driver while leaving its ALSA controls still present in the soundcard. Obviously attempting to access them could cause segfaults or at least dereferencing stale pointers.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup</p> <p>Use the control private_free callback to free the associated data block. This ensures that the memory won&#39;t leak, whatever way the control gets destroyed.</p> <p>The original implementation didn&#39;t actually remove the ALSA controls in hda_cs_dsp_control_remove(). It only freed the internal tracking structure. This meant it was possible to remove/unload the amp driver while leaving its ALSA controls still present in the soundcard. Obviously attempting to access them could cause segfaults or at least dereferencing stale pointers.</p> https://vulnerability.circl.lu/vuln/cve-2024-38388