The wm_adsp audio driver in the Linux kernel contains a flaw where the wm_adsp_control_remove() function attempts to free private control data without first checking for a NULL pointer. When a control lacking private data is removed, this results in a NULL dereference that triggers a kernel oops and a system crash. This vulnerability leads to a denial of service by interrupting kernel operation, with no direct impact on confidentiality or integrity.

All Linux kernel builds that include the wm_adsp audio driver and that do not contain the commit adding the NULL check are affected. Because the advisory does not specify a precise version range, it is inferred that any kernel compiled before the referenced commit is at risk. Distribution kernels that are still shipping with older builds are subject to a NULL pointer dereference in the Linux kernel’s ASoC wm_adsp driver, specifically in the function that removes firmware controls. When a control that lacks private data is removed, the driver attempts to free that data without first checking for a null pointer. This causes a kernel oops that results in a system crash, representing a classic denial‑of‑service attack. The weakness is classified as CWE‑476.

The CVSS score of 5.5 indicates moderate severity. The EPSS score is reported as <1%, showing a very low probability of automated exploitation. The vulnerability is not listed in the CISA KEV catalog, and no public exploits are known. The likely attack vector is local or privileged, requiring the attacker to manipulate ALSA controls or trigger a control removal. The impact is limited to availability; no confidentiality or integrity compromise is implied.