ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting
Summary
GSD-2022-1001885: ASoC: xilinx: xlnx_formatter_pcm: Handle sysclk setting. Affects Kernel versions >= 6f6c3c36f0917be24587eeba818ab4fdfcb5465a, < bb0a0e23dd0070e6f407387f3822daef95e5815d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ASoC (Audio System on Chip) framework in the Linux Kernel provides support for audio devices on embedded systems. The xlnx_formatter_pcm module is a component of the ASoC framework specific to Xilinx platforms. It is responsible for handling the formatting of audio data for playback or recording. This vulnerability affects the xlnx_formatter_pcm module and its handling of the sysclk setting.
Vulnerability Detail
The vulnerability in the xlnx_formatter_pcm module arises from improper handling of the sysclk setting. This can lead to potential security vulnerabilities, although the exact impact and attack plausibility have not been proven. The vulnerability was introduced in Linux Kernel version v5.1 by commit 6f6c3c36f0917be24587eeba818ab4fdfcb5465a and has been fixed in version v5.15.33 by commit bb0a0e23dd0070e6f407387f3822daef95e5815d.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The ASoC xlnx_formatter_pcm module in the Linux Kernel is vulnerable to a sysclk setting handling issue. It is recommended to update the Linux Kernel to version v5.15.33 or later to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The ASoC (Audio System on Chip) framework is a component of the Linux Kernel that provides support for audio devices on embedded systems. It enables the integration and management of audio functionality in these systems.
The xlnx_formatter_pcm module is a specific component of the ASoC framework designed for Xilinx platforms. It handles the formatting of audio data for playback or recording.
The sysclk setting refers to the system clock frequency used for audio processing. It is a configurable parameter that affects the timing and synchronization of audio data.
The potential ramifications of this vulnerability include possible security vulnerabilities in the handling of audio data. However, the exact impact and attack plausibility have not been proven.
You can use Vulert's playground at Vulert Scanner to check if your system is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities, using just a manifest file like package-lock.json.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
