Shift-out-of-bounds Error in gpio: wcd934x
Summary
GSD-2021-1001039: gpio: wcd934x: Fix shift-out-of-bounds error. Affects Kernel versions >= 59c324683400b41caa6d85b091e812ee3d5415c3, < dd55331d493b7ea75c5db1f24d6822946fde2862. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The gpio: wcd934x is a component in the Linux Kernel that provides support for controlling General Purpose Input/Output (GPIO) pins on Qualcomm WCD934x audio codecs. GPIO pins are used to interface with external devices and can be configured as inputs or outputs. The wcd934x driver allows users to manipulate these pins programmatically. However, a shift-out-of-bounds error has been discovered in the driver, which could lead to potential security vulnerabilities.
Vulnerability Detail
The shift-out-of-bounds error in gpio: wcd934x occurs when there is an attempt to shift a value by a number of bits that exceeds the size of the data type. This can result in unexpected behavior and potential security vulnerabilities. In this specific case, the error was introduced in version v5.6 of the Linux Kernel by commit 59c324683400b41caa6d85b091e812ee3d5415c3 and was fixed in version v5.12.11 by commit dd55331d493b7ea75c5db1f24d6822946fde2862. The actual impact and attack plausibility of this vulnerability have not yet been proven.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The shift-out-of-bounds error in gpio: wcd934x can be fixed by updating the Linux Kernel to version v5.12.11 or later. It is important to stay up-to-date with the latest security patches to ensure the integrity and security of the system. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
gpio: wcd934x is a component in the Linux Kernel that provides support for controlling General Purpose Input/Output (GPIO) pins on Qualcomm WCD934x audio codecs. GPIO pins are used to interface with external devices and can be configured as inputs or outputs.
A shift-out-of-bounds error occurs when there is an attempt to shift a value by a number of bits that exceeds the size of the data type. This can result in unexpected behavior and potential security vulnerabilities.
The shift-out-of-bounds error was introduced in version v5.6 of the Linux Kernel by commit 59c324683400b41caa6d85b091e812ee3d5415c3.
To fix the shift-out-of-bounds error, it is recommended to update the Linux Kernel to version v5.12.11 or later.
The potential security implications of this vulnerability are currently unknown as the actual impact and attack plausibility have not yet been proven.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
