ASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_*
Summary
GSD-2022-1003598: ASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_*. Affects Kernel versions >= 6748d05590594837e42dfa975879fb275099f0b2, < 510e879420b410d88c612aecc6ca15dc6fe77473. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The ASoC (Audio for System on Chip) framework is a subsystem in the Linux Kernel that provides support for audio functionality on various SoC platforms. The ti: j721e-evm package is a specific implementation of the ASoC framework for the Texas Instruments J721E Evaluation Module. This package enables audio capabilities on the J721E platform, allowing for audio input and output.
Vulnerability Detail
The vulnerability in the ti: j721e-evm package involves a refcount leak in the j721e_soc_probe_* functions. This refcount leak can lead to a resource exhaustion issue, potentially causing system instability or denial of service. The vulnerability was introduced in version v5.9 of the Linux Kernel by commit 6748d05590594837e42dfa975879fb275099f0b2 and has been fixed in version v5.10.121 by commit 510e879420b410d88c612aecc6ca15dc6fe77473.
How To Fix
No fixed version is published for this vulnerability.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.10.121 or later. This can be done by pulling the latest updates from the official Linux Kernel repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The ti: j721e-evm package in the ASoC framework for the Texas Instruments J721E Evaluation Module is vulnerable to a refcount leak issue. This vulnerability can lead to resource exhaustion and potential system instability. It is advised to update the Linux Kernel to version v5.10.121 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ASoC (Audio for System on Chip) is a subsystem in the Linux Kernel that provides support for audio functionality on various SoC platforms.
ti: j721e-evm is a specific implementation of the ASoC framework for the Texas Instruments J721E Evaluation Module, enabling audio capabilities on the J721E platform.
A refcount leak refers to a situation where the reference count of a resource is not properly managed, leading to a resource not being released when it should be. This can result in resource exhaustion and potential system instability.
The refcount leak in the j721e_soc_probe_* functions can lead to resource exhaustion, potentially causing system instability or denial of service.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.10.121 or later.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.