{"id":"CVE-2024-56657","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: control: Avoid WARN() for symlink errors\n\nUsing WARN() for showing the error of symlink creations don't give\nmore information than telling that something goes wro…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: control: Avoid WARN() for symlink errors\n\nUsing WARN() for showing the error of symlink creations don't give\nmore information than telling that something goes wro…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 5.13, < 6.6.67","linux_kernel >= 6.7, < 6.12.6","linux_kernel = 6.13"],"patched":["linux_kernel 6.12.6"],"published":"2024-12-27","updated":"2026-10-15","sourceUpdated":"2026-10-15T02:17:09.283","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-56657","references":[{"url":"https://git.kernel.org/stable/c/365ee29e559269cbb2108c4cc05dd8e262b4e84e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/36c0764474b637bbee498806485bed524cad486b","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/4e5a92a7223c83c1f5f2db6cd010ac9347948972","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/b2e538a9827dd04ab5273bf4be8eb2edb84357b0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/d5a1ca7b59804d6779644001a878ed925a4688ca","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-784472.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"tags":["nvd","cve.org"],"epss":0.00221,"epssPercentile":0.12621,"ingestedAt":"2026-10-15T03:30:12.775Z","ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2025-10-01T20:00:13.236177Z"},"slug":"CVE-2024-56657","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nALSA: control: Avoid WARN() for symlink errors\n\nUsing WARN() for showing the error of symlink creations don't give\nmore information than telling that something goes wrong, since the\nusual code path is a lregister callback from each control element\ncreation.  More badly, the use of WARN() rather confuses fuzzer as if\nit were serious issues.\n\nThis patch downgrades the warning messages to use the normal dev_err()\ninstead of WARN().  For making it clearer, add the function name to\nthe prefix, too.\n\n## Affected\n\n- `linux_kernel >= 5.13, < 6.6.67`\n- `linux_kernel >= 6.7, < 6.12.6`\n- `linux_kernel = 6.13`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.12.6`","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}