{"id":"CVE-2024-58012","title":"ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params\n\nEach cpu DAI should associate with a widget. However, the topology might\nnot create the right numbe…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvssSource":"adp","vendor":"Linux","product":"Linux","affected":["Linux >= 4c414da93a4642d02c67fbe82f1834be7bf586b7 < 2be324c89993c51c9554a84415604be098876d42","Linux >= 4c414da93a4642d02c67fbe82f1834be7bf586b7 < e012a77e4d7632cf615ba9625b1600ed8985c3b5","Linux >= 4c414da93a4642d02c67fbe82f1834be7bf586b7 < 789a2fbf0900982788408d3b0034e0e3f914fb3b","Linux >= 4c414da93a4642d02c67fbe82f1834be7bf586b7 < 569922b82ca660f8b24e705f6cf674e6b1f99cc7","Linux 5.7"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2025-10-01T20:08:27.061847Z"},"published":"2025-02-27","updated":"2026-10-21","sourceUpdated":"2026-10-21T12:35:50.169Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-58012","references":[{"url":"https://git.kernel.org/stable/c/2be324c89993c51c9554a84415604be098876d42"},{"url":"https://git.kernel.org/stable/c/e012a77e4d7632cf615ba9625b1600ed8985c3b5"},{"url":"https://git.kernel.org/stable/c/789a2fbf0900982788408d3b0034e0e3f914fb3b"},{"url":"https://git.kernel.org/stable/c/569922b82ca660f8b24e705f6cf674e6b1f99cc7"}],"tags":["cve.org"],"epss":0.00255,"epssPercentile":0.17005,"ingestedAt":"2026-10-21T12:48:53.720Z","slug":"CVE-2024-58012","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params\n\nEach cpu DAI should associate with a widget. However, the topology might\nnot create the right number of DAI widgets for aggregated amps. And it\nwill cause NULL pointer deference.\nCheck that the DAI widget associated with the CPU DAI is valid to prevent\nNULL pointer deference due to missing DAI widgets in topologies with\naggregated amps.\n\n## Affected\n\n- `Linux >= 4c414da93a4642d02c67fbe82f1834be7bf586b7 < 2be324c89993c51c9554a84415604be098876d42`\n- `Linux >= 4c414da93a4642d02c67fbe82f1834be7bf586b7 < e012a77e4d7632cf615ba9625b1600ed8985c3b5`\n- `Linux >= 4c414da93a4642d02c67fbe82f1834be7bf586b7 < 789a2fbf0900982788408d3b0034e0e3f914fb3b`\n- `Linux >= 4c414da93a4642d02c67fbe82f1834be7bf586b7 < 569922b82ca660f8b24e705f6cf674e6b1f99cc7`\n- `Linux 5.7`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}