Vulnerability in ASoC: mediatek: mt8192-mt6359
Summary
GSD-2022-1001559: ASoC: mediatek: mt8192-mt6359: Fix error handling in mt8192_mt6359_dev_probe. Affects Kernel versions >= d1be8577f0b2f679095d237aaf281dca344f06c4, < d5a38629f1aaf397fd471b27e49d55289ddc0656. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ASoC (Audio System on Chip) framework in the Linux Kernel is responsible for managing audio functionality on various hardware platforms. One such platform is the mediatek: mt8192-mt6359, which combines the mt8192 SoC with the mt6359 audio codec. This integration enables audio input and output capabilities on devices that utilize this hardware combination.
Vulnerability Detail
The vulnerability identified in the ASoC mediatek: mt8192-mt6359 package relates to an error handling issue within the mt8192_mt6359_dev_probe function. This function is responsible for initializing and configuring the audio codec during device probing. However, due to improper error handling, certain failure scenarios may not be adequately addressed, leading to potential issues in the audio functionality of affected devices.
The impact of this vulnerability can vary depending on the specific failure scenario encountered. In some cases, it may result in audio malfunctions, such as distorted or non-functional sound output. In more severe cases, it could potentially lead to system instability or crashes.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No workaround has been provided for this vulnerability. It is advised to apply the recommended fix by updating the Linux Kernel to the specified version.
Conclusion
In conclusion, the ASoC mediatek: mt8192-mt6359 package in the Linux Kernel is vulnerable to an error handling issue that can impact audio functionality on affected devices. To mitigate this vulnerability, it is crucial to update the Linux Kernel to version v5.16.19 or later. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ASoC (Audio System on Chip) is a framework in the Linux Kernel that manages audio functionality on various hardware platforms.
mediatek: mt8192-mt6359 is a hardware combination that integrates the mt8192 SoC with the mt6359 audio codec, enabling audio input and output capabilities on supported devices.
The impact of this vulnerability can range from audio malfunctions, such as distorted or non-functional sound output, to potential system instability or crashes.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.16.19 or later, which includes a commit that addresses the error handling issue.
No workaround has been provided for this vulnerability. It is advised to apply the recommended fix by updating the Linux Kernel.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
