ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()
Summary
GSD-2022-1000137: ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx(). Affects Kernel versions < 7659f25a80e6affb784b690df8994b79b4212fd4. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ASoC (Audio System on Chip) package is a subsystem in the Linux Kernel that provides support for audio devices integrated into system-on-chip (SoC) platforms. It allows for audio playback, recording, and processing functionalities. The vulnerability affects the ASoC ops module, specifically the snd_soc_put_xr_sx() function.
Vulnerability Detail
The vulnerability in snd_soc_put_xr_sx() allows for out of bounds values to be accepted, potentially leading to memory corruption or other security issues. An attacker could exploit this vulnerability to execute arbitrary code, escalate privileges, or cause a denial of service. The vulnerability has been fixed in Linux Kernel version v4.19.228 by commit 7659f25a80e6affb784b690df8994b79b4212fd4.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in ASoC ops module's snd_soc_put_xr_sx() function allows for out of bounds values to be accepted, potentially leading to memory corruption or other security issues. It is recommended to update the Linux Kernel to version v4.19.228 or later to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ASoC (Audio System on Chip) is a subsystem in the Linux Kernel that provides support for audio devices integrated into system-on-chip (SoC) platforms. It enables audio playback, recording, and processing functionalities.
snd_soc_put_xr_sx() is a function in the ASoC ops module that handles the setting of out of bounds values. This function is vulnerable to accepting such values, leading to potential security issues.
The vulnerability could allow an attacker to execute arbitrary code, escalate privileges, or cause a denial of service. It may also result in memory corruption or other security issues.
Yes, the vulnerability has been fixed in Linux Kernel version v4.19.228 by commit 7659f25a80e6affb784b690df8994b79b4212fd4.
To fix this vulnerability, you can update the Linux Kernel to version v4.19.228 or later. Download the updated kernel source code from the official Linux Kernel repository and compile it for your system. Alternatively, wait for your Linux distribution to provide an updated package.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
