CVE-2024-56532

CVE-2024-56532 addresses a vulnerability in the Linux kernel's ALSA us122l driver, where the use of snd_card_free() during USB device disconnection could lead to a soft lockup by blocking upper-layer USB ioctls. This issue, affecting the Linux kernel, has been resolved by replacing snd_card_free() with snd_card_free_when_closed(), which allows for asynchronous resource release. The vulnerability is rated Medium severity with a CVSS score of 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), indicating a local attack vector with low complexity, requiring low privileges, and resulting in high availability impact (denial of service) without affecting confidentiality or integrity. There is currently no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, consistent with the majority of reported vulnerabilities.