---
id: CVE-2024-58012
title: 'ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params

  Each cpu DAI should associate with a widget. However, the topology might
  not create the right numbe…
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cvssSource: adp
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 4c414da93a4642d02c67fbe82f1834be7bf586b7 <
    eb36662773ce1dd9b709fc0b962b2149b2a2e60e
  - >-
    Linux >= 4c414da93a4642d02c67fbe82f1834be7bf586b7 <
    2be324c89993c51c9554a84415604be098876d42
  - >-
    Linux >= 4c414da93a4642d02c67fbe82f1834be7bf586b7 <
    e012a77e4d7632cf615ba9625b1600ed8985c3b5
  - >-
    Linux >= 4c414da93a4642d02c67fbe82f1834be7bf586b7 <
    789a2fbf0900982788408d3b0034e0e3f914fb3b
  - >-
    Linux >= 4c414da93a4642d02c67fbe82f1834be7bf586b7 <
    569922b82ca660f8b24e705f6cf674e6b1f99cc7
  - Linux 5.7
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2025-10-01T20:08:27.061847Z'
published: '2025-02-27'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T12:20:37.411Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-58012'
references:
  - url: 'https://git.kernel.org/stable/c/eb36662773ce1dd9b709fc0b962b2149b2a2e60e'
  - url: 'https://git.kernel.org/stable/c/2be324c89993c51c9554a84415604be098876d42'
  - url: 'https://git.kernel.org/stable/c/e012a77e4d7632cf615ba9625b1600ed8985c3b5'
  - url: 'https://git.kernel.org/stable/c/789a2fbf0900982788408d3b0034e0e3f914fb3b'
  - url: 'https://git.kernel.org/stable/c/569922b82ca660f8b24e705f6cf674e6b1f99cc7'
tags:
  - cve.org
epss: 0.00255
epssPercentile: 0.17126
ingestedAt: '2026-10-21T12:48:53.720Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params

Each cpu DAI should associate with a widget. However, the topology might
not create the right number of DAI widgets for aggregated amps. And it
will cause NULL pointer deference.
Check that the DAI widget associated with the CPU DAI is valid to prevent
NULL pointer deference due to missing DAI widgets in topologies with
aggregated amps.

## Affected

- `Linux >= 4c414da93a4642d02c67fbe82f1834be7bf586b7 < eb36662773ce1dd9b709fc0b962b2149b2a2e60e`
- `Linux >= 4c414da93a4642d02c67fbe82f1834be7bf586b7 < 2be324c89993c51c9554a84415604be098876d42`
- `Linux >= 4c414da93a4642d02c67fbe82f1834be7bf586b7 < e012a77e4d7632cf615ba9625b1600ed8985c3b5`
- `Linux >= 4c414da93a4642d02c67fbe82f1834be7bf586b7 < 789a2fbf0900982788408d3b0034e0e3f914fb3b`
- `Linux >= 4c414da93a4642d02c67fbe82f1834be7bf586b7 < 569922b82ca660f8b24e705f6cf674e6b1f99cc7`
- `Linux 5.7`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.