Vulnerability in Kernel: ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe
Summary
GSD-2022-1004092: ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe. Affects Kernel versions >= 94319ba10ecabc8f28129566d1f5793e3e7a0a79, < 0a1901f34f775b83ea4b8dbb5ed992147b9b8531. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that manages communication between hardware and software. It provides essential functionalities and services to ensure the proper functioning of the system. ASoC (Audio System on Chip) is a subsystem within the Kernel that handles audio-related operations. The mediatek driver in ASoC is responsible for supporting MediaTek audio devices. One of the drivers, mt8173_max98090_dev_probe, is affected by a vulnerability that requires fixing error handling.
Vulnerability Detail
The vulnerability in mt8173_max98090_dev_probe driver within the mediatek ASoC subsystem allows for potential security risks. The issue arises from improper error handling during device probing. Attackers may exploit this vulnerability to execute arbitrary code or cause a denial-of-service (DoS) condition. The vulnerability was introduced in Linux Kernel version v4.2 and is fixed in version v4.9.318.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix by updating the Linux Kernel as mentioned above.
Conclusion
The vulnerability in mt8173_max98090_dev_probe driver within the mediatek ASoC subsystem poses potential security risks, allowing for arbitrary code execution or DoS attacks. It is crucial to update the Linux Kernel to version v4.9.318 or later to address this vulnerability. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability in mt8173_max98090_dev_probe driver can potentially allow attackers to execute arbitrary code or cause a denial-of-service (DoS) condition.
You can use Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities without requiring access to the code or installation.
At the time of this report, there is no known public exploit for this vulnerability. However, it is crucial to apply the fix promptly to mitigate any potential risks.
It is recommended to update the Linux Kernel to the fixed version rather than attempting manual patching. Updating the Kernel ensures that all necessary fixes and improvements are applied correctly.
You can find more information about this vulnerability in the Linux Kernel's official Git repository. The vulnerability is tracked under the ID GSD-2022-1004092.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
