ASoC: samsung: Fix refcount leak in aries_audio_probe
Summary
GSD-2022-1003403: ASoC: samsung: Fix refcount leak in aries_audio_probe. Affects Kernel versions >= 7a3a7671fa6c7e90aff5f4242add2a40587b85ef, < 85d899f396622d3034643bf89615a78f9be7c91a. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ASoC (Audio System on Chip) framework in the Linux Kernel is responsible for managing audio functionality on Samsung devices. The aries_audio_probe function is a part of this framework and is used to initialize the audio driver for Samsung Aries-based devices. This vulnerability specifically affects the aries_audio_probe function, leading to a refcount leak.
Vulnerability Detail
The refcount leak vulnerability in the aries_audio_probe function can result in a resource leak, potentially leading to a denial-of-service condition or other security implications. When the function is called, it fails to properly release a reference count, causing a leak. This can result in resource exhaustion and impact the stability and performance of the affected system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. The recommended solution is to update the Linux Kernel to the fixed version.
Conclusion
The refcount leak vulnerability in the aries_audio_probe function of the ASoC framework can have significant implications for the stability and performance of Samsung Aries-based devices. It is crucial to update the Linux Kernel to version v5.15.46 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability can result in a resource leak, potentially leading to a denial-of-service condition or other security implications. It can impact the stability and performance of the affected system.
This vulnerability affects Samsung Aries-based devices that utilize the ASoC framework in the Linux Kernel.
At the time of this report, there is no known exploit for this vulnerability. However, it is important to promptly apply the fix to mitigate any potential risks.
There may be other vulnerabilities in the ASoC framework, but this specific report focuses on the refcount leak in the aries_audio_probe function.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground and it will provide real-time monitoring and alerts for open-source vulnerabilities, including this one.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
