Vulnerability in ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe
Summary
GSD-2022-1002806: ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe. Affects Kernel versions >= 94319ba10ecabc8f28129566d1f5793e3e7a0a79, < 98d5afe868df998b0244f4c229ab758b4083684a. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ASoC (Audio System on Chip) framework in the Linux Kernel is responsible for managing audio functionality on various hardware platforms. One of the supported platforms is MediaTek's mt8173 SoC, which includes the max98090 audio codec. The mt8173_max98090_dev_probe function is responsible for initializing and configuring the max98090 codec on devices using the mt8173 SoC. However, there is a vulnerability in the error handling of this function, which can lead to potential security issues.
Vulnerability Detail
The vulnerability in mt8173_max98090_dev_probe arises from improper error handling. When an error occurs during the initialization or configuration of the max98090 codec, the function does not properly handle the error and may continue execution without appropriate checks. This can result in various security issues, such as memory corruption or privilege escalation. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in mt8173_max98090_dev_probe has been fixed in Linux Kernel version v5.18.3. It is recommended to update the Linux Kernel to version v5.18.3 or later to mitigate the vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ASoC stands for Audio System on Chip. It is a framework in the Linux Kernel that manages audio functionality on various hardware platforms.
mt8173 is a System on Chip (SoC) developed by MediaTek. It is used in various devices and includes support for the max98090 audio codec.
The max98090 is an audio codec chip developed by Maxim Integrated. It provides audio processing and playback capabilities for devices using the mt8173 SoC.
The improper error handling in mt8173_max98090_dev_probe can lead to security issues such as memory corruption or privilege escalation.
No, the impact and attack plausibility of this vulnerability have not been proven yet.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
