sound open firmware

  1. CVE-2024-39473: Linux SOF IPC4 NULL Dereference and Azure Linux Attestations

    A quietly released Linux-kernel fix tracked as CVE-2024-39473 closes a NULL-pointer dereference in the Sound Open Firmware (SOF) IPC4 topology code — but Microsoft’s public attestation that “Azure Linux includes this open‑source library and is therefore potentially affected” should be read as a...