ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe
Summary
GSD-2022-1003926: ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe. Affects Kernel versions >= 8625c1dbd87631572f8e2c05bc67736b73d6f02f, < 9345122f5fb9f97a206f440f38bb656e53f46912. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The ASoC (Audio System on Chip) framework in the Linux Kernel provides support for audio devices on various platforms. The mediatek driver is responsible for handling audio on MediaTek SoCs. The mt2701_wm8960_machine_probe function is a part of this driver and is used to initialize the audio codec on the MT2701 platform with the WM8960 codec. However, there is a missing of_node_put call in this function, which can lead to a reference leak.
Vulnerability Detail
The missing of_node_put call in mt2701_wm8960_machine_probe can result in a reference leak, where the reference count for the device tree node is not properly decremented. This can lead to resource exhaustion and potential denial of service if the vulnerability is exploited repeatedly. An attacker with local access to the system may be able to trigger this vulnerability and cause instability or crashes.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The missing of_node_put vulnerability in mt2701_wm8960_machine_probe can lead to a reference leak and potential denial of service. It is recommended to update to Linux Kernel version v4.19.247 or later, which includes the fix for this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ASoC stands for Audio System on Chip. It is a framework in the Linux Kernel that provides support for audio devices on various platforms.
The mediatek driver is responsible for handling audio on MediaTek SoCs (System on Chips). It is a part of the ASoC framework.
mt2701_wm8960_machine_probe is a function in the mediatek driver that is used to initialize the audio codec on the MT2701 platform with the WM8960 codec.
A reference leak occurs when a reference count for a resource is not properly decremented, leading to resource exhaustion and potential denial of service.
An attacker with local access to the system may be able to trigger this vulnerability and cause instability or crashes.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
