ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe
Summary
GSD-2022-1002811: ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe. Affects Kernel versions >= 8625c1dbd87631572f8e2c05bc67736b73d6f02f, < 94587aa17abf8b26f543d2b29c44abc21bc36836. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ASoC (Audio for the System on Chip) framework in the Linux Kernel provides support for audio devices on various SoCs. This vulnerability affects the mediatek driver in the ASoC framework, specifically in the mt2701_wm8960_machine_probe function. The mt2701_wm8960_machine_probe function is responsible for initializing the WM8960 audio codec on the MediaTek MT2701 SoC. The vulnerability arises from a missing of_node_put call, which can lead to a reference leak and potential resource exhaustion.
Vulnerability Detail
The missing of_node_put call in the mt2701_wm8960_machine_probe function can result in a reference leak, potentially leading to resource exhaustion. An attacker could exploit this vulnerability to exhaust system resources, causing a denial of service (DoS) condition. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, update the Linux Kernel to version v5.18.3 or later. This fix was implemented in commit 94587aa17abf8b26f543d2b29c44abc21bc36836. Ensure that you are using a version of the Linux Kernel that includes this commit or any subsequent versions.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The ASoC mediatek driver in the Linux Kernel is vulnerable to a missing of_node_put call in the mt2701_wm8960_machine_probe function. This vulnerability can potentially lead to resource exhaustion and a denial of service (DoS) condition. It is recommended to update the Linux Kernel to version v5.18.3 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ASoC stands for Audio for the System on Chip. It is a framework in the Linux Kernel that provides support for audio devices on various SoCs.
The mediatek driver in ASoC is responsible for providing support for MediaTek audio devices in the ASoC framework.
The mt2701_wm8960_machine_probe function is a part of the mediatek driver in ASoC. It is responsible for initializing the WM8960 audio codec on the MediaTek MT2701 SoC.
The impact of this vulnerability is a potential denial of service (DoS) condition due to resource exhaustion. However, the actual impact and attack plausibility have not been proven yet.
To fix this vulnerability, update the Linux Kernel to version v5.18.3 or later, which includes the necessary fix for this issue.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.