Vulnerability in Kernel package: ASoC: codecs: wcd938x
Summary
GSD-2022-1000590: ASoC: codecs: wcd938x: fix incorrect used of portid. Affects Kernel versions >= e8ba1e05bdc016700c85fad559a812c2e795442f, < aa7152f9f117b3e66b3c0d4158ca4c6d46ab229f. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a fundamental component of the Linux operating system, responsible for managing the system's core functionality. It includes various modules and drivers that enable communication between hardware and software components. One of these modules is ASoC (Advanced Linux Sound Architecture), which provides support for audio codecs. The wcd938x codec driver is a part of ASoC and is used for controlling audio functionality on devices that utilize the Qualcomm WCD938x audio codec. This vulnerability specifically affects the wcd938x codec driver.
Vulnerability Detail
The vulnerability in the wcd938x codec driver arises from an incorrect usage of the 'portid' parameter. This flaw allows an attacker to manipulate the 'portid' value, potentially leading to unauthorized access or privilege escalation. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in Linux Kernel version v5.15.22 by commit aa7152f9f117b3e66b3c0d4158ca4c6d46ab229f. However, it was introduced in version v5.14 by commit e8ba1e05bdc016700c85fad559a812c2e795442f.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As this vulnerability has been fixed in the latest version of the Linux Kernel, there is no specific workaround available. It is strongly advised to update to the fixed version as soon as possible.
Conclusion
In conclusion, the vulnerability in the Kernel package's ASoC wcd938x codec driver has been identified and fixed in Linux Kernel version v5.15.22. It is crucial to update to the fixed version to mitigate the potential risks associated with this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel package is a crucial component of the Linux operating system that manages core system functionality and enables communication between hardware and software components.
ASoC (Advanced Linux Sound Architecture) is a module within the Kernel package that provides support for audio codecs and controls audio functionality on Linux devices.
The wcd938x codec driver is a part of ASoC and is responsible for managing audio functionality on devices that utilize the Qualcomm WCD938x audio codec.
The impact of this vulnerability is not yet proven. However, if successfully exploited, it could lead to unauthorized access or privilege escalation.
To fix this vulnerability, it is recommended to update the Linux Kernel package to version v5.15.22 or later. Follow the official update process provided by the Linux distribution or manually compile and install the updated Kernel version.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
