ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting
Summary
GSD-2022-1001577: ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting. Affects Kernel versions >= 6f6c3c36f0917be24587eeba818ab4fdfcb5465a, < 915f0bf118248e527f721f0c39e17eb6845a7820. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ASoC (Audio System on Chip) framework in the Linux Kernel provides support for audio devices on embedded systems. The xlnx_formatter_pcm module is a component of the ASoC framework specific to Xilinx platforms. It handles the formatting of audio data for playback or capture. This vulnerability affects the xlnx_formatter_pcm module and its handling of the sysclk setting.
Vulnerability Detail
The vulnerability in the xlnx_formatter_pcm module arises from a lack of proper handling of the sysclk setting. This can lead to potential security vulnerabilities, although the actual impact and attack plausibility have not been proven. The vulnerability was introduced in version v5.1 of the Linux Kernel by commit 6f6c3c36f0917be24587eeba818ab4fdfcb5465a and has been fixed in version v5.16.19 by commit 915f0bf118248e527f721f0c39e17eb6845a7820.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The xlnx_formatter_pcm module in the ASoC framework of the Linux Kernel is vulnerable to a sysclk setting handling issue. This vulnerability can potentially lead to security vulnerabilities, although the actual impact and attack plausibility have not been proven. It is recommended to update the Linux Kernel to version v5.16.19 or later to fix this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The ASoC (Audio System on Chip) framework is a component of the Linux Kernel that provides support for audio devices on embedded systems. It allows for the integration and configuration of audio components, such as codecs and audio interfaces.
The xlnx_formatter_pcm module is a component of the ASoC framework specific to Xilinx platforms. It handles the formatting of audio data for playback or capture.
The sysclk setting refers to the system clock frequency used for audio data processing. It is a configurable parameter that affects the timing and synchronization of audio operations.
The potential ramifications of this vulnerability include possible security vulnerabilities in the handling of audio data. However, the actual impact and attack plausibility have not yet been proven.
You can use Vulert's playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Vulert uses a manifest file like package-lock.json to monitor and alert in real-time for open-source vulnerabilities in the software.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
