Vulnerability in ASoC: samsung package - refcount leak in aries_audio_probe
Summary
GSD-2022-1003107: ASoC: samsung: Fix refcount leak in aries_audio_probe. Affects Kernel versions >= 7a3a7671fa6c7e90aff5f4242add2a40587b85ef, < 70130bde3457d28c02c76b6cacc5d40a72dd6e17. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ASoC (Audio System on Chip) package is a component of the Linux Kernel that provides support for audio functionality on Samsung devices. It includes drivers and modules specific to Samsung's audio hardware. The aries_audio_probe function is responsible for initializing the audio subsystem on Samsung Aries-based devices. This vulnerability in the aries_audio_probe function can lead to a refcount leak, potentially causing memory leaks and resource exhaustion.
Vulnerability Detail
The vulnerability originates from a refcount leak in the aries_audio_probe function of the ASoC package. When the function is called, it fails to properly release resources and decrement the reference count, leading to a leak. This can result in memory leaks and resource exhaustion, potentially impacting system stability and performance. Attackers may be able to exploit this vulnerability to cause a denial-of-service condition or execute arbitrary code with elevated privileges.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, users can disable the affected audio subsystem or module, if feasible, until the updated kernel is installed. This can be achieved by modifying the kernel configuration or blacklisting the relevant module. However, it is strongly advised to apply the official fix as soon as possible.
Conclusion
In conclusion, the ASoC package in the Linux Kernel is vulnerable to a refcount leak in the aries_audio_probe function. This can lead to memory leaks and resource exhaustion, potentially impacting system stability and allowing for privilege escalation. It is crucial to update the Linux Kernel to version v5.17.14 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ASoC (Audio System on Chip) is a component of the Linux Kernel that provides support for audio functionality on Samsung devices. It includes drivers and modules specific to Samsung's audio hardware.
The vulnerability can lead to a refcount leak, causing memory leaks and resource exhaustion. This can impact system stability and performance, potentially allowing attackers to execute arbitrary code with elevated privileges.
To fix this vulnerability, update the Linux Kernel to version v5.17.14 or later, which includes the necessary fix for the refcount leak in the aries_audio_probe function.
As a temporary workaround, users can disable the affected audio subsystem or module until the updated kernel is installed. However, it is recommended to apply the official fix as soon as possible.
Users can obtain the updated Linux Kernel from the official Linux Kernel repository. It is recommended to download and install version v5.17.14 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
