ASoC: codecs: wcd934x: handle channel mappping list correctly
Summary
GSD-2021-1002604: ASoC: codecs: wcd934x: handle channel mappping list correctly. Affects Kernel versions >= a70d9245759a48e57bb1dc9f63213dcf3017db32, < 339ffb5b56005582aacc860524d2d208604049d1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ASoC (Audio System on Chip) framework in the Linux Kernel provides support for audio codecs, allowing for audio playback and recording on various devices. One such codec is the wcd934x codec. This codec is responsible for handling audio channel mapping, which determines how audio signals are distributed across different channels (e.g., left and right speakers). However, a vulnerability has been discovered in the wcd934x codec's handling of the channel mapping list.
Vulnerability Detail
The vulnerability in the wcd934x codec's channel mapping list handling can potentially lead to security issues. The specific technical details of the vulnerability have not been provided in the available information. However, it is mentioned that the vulnerability was fixed in Linux Kernel version v5.15.8 by commit 339ffb5b56005582aacc860524d2d208604049d1. The vulnerability was introduced in version v5.6 by commit a70d9245759a48e57bb1dc9f63213dcf3017db32. It is important to note that the impact and attack plausibility of this vulnerability have not been proven.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The ASoC wcd934x codec vulnerability related to channel mapping list handling has been identified and fixed in Linux Kernel version v5.15.8. To mitigate the vulnerability, users should update their Linux Kernel to the fixed version. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The ASoC (Audio System on Chip) framework is a part of the Linux Kernel that provides support for audio codecs, enabling audio playback and recording on various devices.
The wcd934x codec is a specific audio codec supported by the ASoC framework. It is responsible for handling audio channel mapping, determining how audio signals are distributed across different channels.
The impact of this vulnerability is not specified in the available information. However, it is mentioned that the vulnerability can potentially lead to security issues.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.15.8 or later. This can be done by obtaining the updated kernel source code and compiling it for the target system.
No specific workaround is mentioned in the available information. It is recommended to update the Linux Kernel to the fixed version.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
