ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe
Summary
GSD-2022-1002772: ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe. Affects Kernel versions >= 81e8e4926167ab32593bbb915b45a42024ca1020, < 7f75e9f629ef54a0845b43889d8ab9dd6e280dd5. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ASoC (Audio System on Chip) framework in the Linux Kernel provides support for audio devices on embedded systems. The fsl (Freescale) module is responsible for handling audio functionality on Freescale i.MX SoCs. The imx_sgtl5000_probe function is used to initialize the SGTL5000 audio codec on i.MX SoCs. This vulnerability affects the imx_sgtl5000_probe function and can lead to a refcount leak.
Vulnerability Detail
The vulnerability in imx_sgtl5000_probe results in a refcount leak. When the function is called, it fails to properly release the reference count on the audio codec, leading to a resource leak. This can potentially result in resource exhaustion and impact the stability and performance of the system. An attacker may be able to exploit this vulnerability to cause a denial-of-service condition or potentially execute arbitrary code.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix mentioned above.
Conclusion
The vulnerability in the imx_sgtl5000_probe function of the ASoC fsl module can lead to a refcount leak, potentially causing resource exhaustion and impacting system stability. It is recommended to update the Linux Kernel to version v5.18.3 or later to fix this vulnerability. No known workarounds are available. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ASoC stands for Audio System on Chip. It is a framework in the Linux Kernel that provides support for audio devices on embedded systems.
The fsl module is responsible for handling audio functionality on Freescale i.MX SoCs.
The imx_sgtl5000_probe function is used to initialize the SGTL5000 audio codec on i.MX SoCs.
A refcount leak occurs when a reference count is not properly released, leading to a resource leak.
This vulnerability can result in resource exhaustion, impacting the stability and performance of the system. It may also allow an attacker to cause a denial-of-service condition or execute arbitrary code.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
