Vulnerability in ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe
Summary
GSD-2022-1003141: ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe. Affects Kernel versions >= 94319ba10ecabc8f28129566d1f5793e3e7a0a79, < ebd5cb4f1f3f10b839e7575219e0f17b60c23113. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ASoC (Audio for System on Chip) framework in the Linux Kernel is responsible for managing audio functionality on various SoC platforms. One of the supported platforms is MediaTek's mt8173, which utilizes the mt8173_max98090_dev_probe driver. This driver is used for audio support on devices using the MediaTek MT8173 SoC. The vulnerability in question relates to error handling within the mt8173_max98090_dev_probe function.
Vulnerability Detail
The vulnerability arises from improper error handling in the mt8173_max98090_dev_probe function of the ASoC driver for MediaTek's mt8173 platform. This issue was introduced in Linux Kernel version v4.2 by commit 94319ba10ecabc8f28129566d1f5793e3e7a0a79 and was fixed in version v5.17.14 by commit ebd5cb4f1f3f10b839e7575219e0f17b60c23113. The vulnerability could potentially be exploited by an attacker to cause a denial-of-service (DoS) condition or execute arbitrary code. Further technical details and attack vectors are not provided in the vulnerability report.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround is mentioned in the vulnerability report.
Conclusion
In conclusion, the ASoC driver for MediaTek's mt8173 platform had a vulnerability related to error handling in the mt8173_max98090_dev_probe function. This vulnerability has been fixed in Linux Kernel version v5.17.14. Users are advised to update their Linux Kernel to the latest stable version to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ASoC stands for Audio for System on Chip. It is a framework in the Linux Kernel that handles audio functionality on various SoC platforms.
mt8173 is a System on Chip (SoC) developed by MediaTek. It is used in various devices and platforms.
mt8173_max98090_dev_probe is a driver in the ASoC framework specifically designed for audio support on devices using the MediaTek MT8173 SoC.
The impact of this vulnerability could include denial-of-service (DoS) conditions or the execution of arbitrary code.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.17.14 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
