Vulnerability in mxs-saif: Refcount Leak in mxs_saif_probe
Summary
GSD-2022-1004077: ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe. Affects Kernel versions >= 08641c7c74dddfcd726512edfaa3b4cbe42e523e, < c933829cbf3338b684869e6c4c8931abf5d68fbd. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The mxs-saif package is a component of the ASoC (Audio System on Chip) framework in the Linux Kernel. It provides support for the i.MX28 SoC audio interface (SAIF). The SAIF interface is responsible for audio data transfer between the i.MX28 SoC and external audio devices. The mxs-saif module is loaded during system initialization to enable audio functionality on devices that utilize the i.MX28 SoC.
Vulnerability Detail
The mxs-saif module in the ASoC framework suffers from a refcount leak vulnerability in the mxs_saif_probe function. This vulnerability was introduced in version v3.5 of the Linux Kernel by commit 08641c7c74dddfcd726512edfaa3b4cbe42e523e and was fixed in version v4.9.318 by commit c933829cbf3338b684869e6c4c8931abf5d68fbd. The vulnerability allows an attacker to cause a refcount leak, potentially leading to resource exhaustion and denial of service. Successful exploitation of this vulnerability could result in system instability or crashes.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix mentioned in the 'how_to_fix' section.
Conclusion
The mxs-saif package in the ASoC framework of the Linux Kernel is vulnerable to a refcount leak issue. This vulnerability can be fixed by updating the Linux Kernel to version v4.9.318 or later. It is recommended to apply the fix as soon as possible to prevent potential resource exhaustion and denial of service attacks. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The mxs-saif package is a component of the ASoC framework in the Linux Kernel. It provides support for the i.MX28 SoC audio interface (SAIF).
The vulnerability allows an attacker to cause a refcount leak, potentially leading to resource exhaustion and denial of service. Successful exploitation of this vulnerability could result in system instability or crashes.
This vulnerability was introduced in version v3.5 of the Linux Kernel by commit 08641c7c74dddfcd726512edfaa3b4cbe42e523e.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v4.9.318 or later. Instructions for updating can be found in the 'how_to_fix' section.
There is no known workaround for this vulnerability. It is recommended to apply the fix mentioned in the 'how_to_fix' section.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
