Vulnerability in ASoC: mediatek: mt8192-mt6359
Summary
GSD-2022-1001872: ASoC: mediatek: mt8192-mt6359: Fix error handling in mt8192_mt6359_dev_probe. Affects Kernel versions >= 286c6f7b28fab19d649c2e1f3bc18fdecdbadfe5, < 87e04a89c31e792eef62bcba6ebb77fd323d28a1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ASoC (Audio System on Chip) component in the Linux Kernel is responsible for managing audio functionality on MediaTek devices. The mt8192-mt6359 driver is specifically designed for the MediaTek MT8192 SoC and MT6359 audio codec. It enables audio input and output capabilities on devices that utilize these components. However, a vulnerability has been identified in the mt8192-mt6359 driver that could potentially be exploited by attackers.
Vulnerability Detail
The vulnerability in the mt8192-mt6359 driver is related to error handling in the mt8192_mt6359_dev_probe function. The specific technical details of the vulnerability have not been provided in the available information. However, it is important to note that vulnerabilities in device drivers can lead to various security risks, including privilege escalation, denial of service, or arbitrary code execution. The impact and attack plausibility of this particular vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
The vulnerability has been addressed in the Linux Kernel version v5.15.33 through the commit 87e04a89c31e792eef62bcba6ebb77fd323d28a1. To fix the vulnerability, users are advised to update their Linux Kernel to version v5.15.33 or later. This update includes the necessary changes to the mt8192-mt6359 driver to mitigate the vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No workaround has been mentioned for this vulnerability. It is recommended to apply the fix by updating the Linux Kernel to the latest version.
Conclusion
The vulnerability in the mt8192-mt6359 driver of the ASoC component in the Linux Kernel has been addressed in version v5.15.33. Users are advised to update their Linux Kernel to this version or later to mitigate the vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ASoC stands for Audio System on Chip. It is a component in the Linux Kernel responsible for managing audio functionality on various devices.
mt8192-mt6359 is a device driver in the Linux Kernel specifically designed for the MediaTek MT8192 SoC and MT6359 audio codec. It enables audio input and output capabilities on devices that utilize these components.
The impact of this vulnerability is currently unknown as the actual attack plausibility and consequences have not been proven. However, vulnerabilities in device drivers can potentially lead to privilege escalation, denial of service, or arbitrary code execution.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.15.33 or later. This update includes the necessary changes to the mt8192-mt6359 driver to mitigate the vulnerability.
No workaround has been mentioned for this vulnerability. It is recommended to apply the fix by updating the Linux Kernel to the latest version.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.