ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM
Summary
GSD-2022-1002271: ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM. Affects Kernel versions >= d16046ffa6de040bf580a64d5f4d0aa18258a854, < 01df5f7627f1624d6bb0b8c0870a569b32adfbf8. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ASoC (Audio for the System on Chip) framework is a part of the Linux Kernel ecosystem. It provides support for audio functionality on various System on Chip (SoC) platforms. This vulnerability affects the ASoC SOF (Sound Open Firmware) driver for Intel platforms. SOF is an open-source firmware project that aims to provide audio support for Intel platforms. The vulnerability in question involves a NULL pointer dereference when the system encounters an ENOMEM (Out of Memory) error.
Vulnerability Detail
The vulnerability occurs when the ASoC SOF driver encounters an ENOMEM error during memory allocation. In such cases, a NULL pointer dereference occurs, leading to a system crash or potential privilege escalation. An attacker could potentially exploit this vulnerability to crash the system or execute arbitrary code with elevated privileges. The vulnerability was introduced in Linux Kernel version v5.2 and was fixed in version v5.4.189.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The ASoC SOF driver for Intel platforms had a vulnerability that could lead to a NULL pointer dereference when encountering an ENOMEM error. This vulnerability has been fixed in Linux Kernel version v5.4.189. It is recommended to update the kernel to the fixed version to mitigate the risk. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ASoC (Audio for the System on Chip) is a framework within the Linux Kernel ecosystem that provides support for audio functionality on various System on Chip (SoC) platforms.
SOF (Sound Open Firmware) is an open-source firmware project that aims to provide audio support for Intel platforms.
A NULL pointer dereference occurs when a program attempts to access or manipulate data using a pointer that points to a NULL (invalid) memory address. This can lead to a system crash or potential security vulnerabilities.
ENOMEM is an error code that indicates an Out of Memory condition. It occurs when a system or process is unable to allocate the required amount of memory.
The potential consequences of this vulnerability include system crashes and potential privilege escalation, allowing attackers to execute arbitrary code with elevated privileges.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
