CVE-2024-50103

What it actually does

A devm_kzalloc() call in asoc_qcom_lpass_cpu_platform_probe() can return NULL without a subsequent check, triggering a NULL pointer dereference in the Linux kernel audio driver.

Why it matters to the business

Affected Ubuntu systems running the listed flashplugin package may experience audio subsystem instability or kernel-level crashes under memory pressure, causing downtime and requiring restarts.

How an attack unfolds

An attacker with local access or the ability to induce memory exhaustion can trigger the platform probe path; the missing NULL check leads to dereference and potential denial of service. Context includes various Linux kernel exploitation campaigns by espionage and financially motivated actors.

How to fix it

Upgrade flashplugin-nonfree (Ubuntu:14.04:LTS) to version 11.2.202.521ubuntu0.14.04.1; apply the upstream kernel commit that adds the missing NULL check after devm_kzalloc().

How to confirm the fix worked

Confirm package version matches the fixed release; inspect the probe function source for the added NULL pointer validation before dereference.

Typical attack path

1. Induce memory pressure to force kzalloc failure during driver probe
2. Execute code path in asoc_qcom_lpass_cpu_platform_probe()
3. Trigger NULL dereference resulting in kernel oops or panic

How to detect it

Search kernel logs and dmesg for oops or panic entries referencing asoc_qcom_lpass_cpu_platform_probe and kzalloc failures; correlate with low-memory events.

What your security team should do

• Apply the listed fixed package version on all affected Ubuntu 14.04 systems
• Reboot and monitor for driver-related kernel panics post-update
• Review memory allocation patterns in audio probe paths during low-memory testing