ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak in Kernel
Summary
GSD-2023-1002371: ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak. Affects Kernel versions < 31167df7c21feb2a74d69a758a5226d83cbfe905. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that provides core functionality and manages system resources. It is responsible for facilitating communication between hardware and software components. The hda-dai module in the Kernel is specifically related to the Intel Sound Open Firmware (SOF) and handles the High Definition Audio (HDA) Digital Audio Interface (DAI). This interface allows audio data to be transferred between the system and audio devices. The vulnerability in the hda-dai module could potentially lead to a stream_tag leak, which may have security implications and impact the proper functioning of audio-related operations.
Vulnerability Detail
The vulnerability in the hda-dai module of the Kernel could result in a stream_tag leak. This leak could potentially allow an attacker to access sensitive audio data or disrupt audio functionality. The exact attack vectors and impact of this vulnerability have not been proven yet. It is important to note that this vulnerability has been addressed in the Linux Kernel version v5.10.169 through commit 31167df7c21feb2a74d69a758a5226d83cbfe905.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The vulnerability in the hda-dai module of the Kernel has the potential to compromise audio data security and disrupt audio functionality. It is crucial to update to the fixed version of the Linux Kernel (v5.10.169 or later) to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability could potentially allow unauthorized access to audio data or disrupt audio functionality.
There is no evidence of this vulnerability being exploited in the wild at the time of discovery.
The vulnerability is present in versions of the Kernel prior to v5.10.169. The fix has been implemented in this version and later.
At the moment, there is no known workaround for this vulnerability. It is recommended to update to the fixed version of the Kernel.
More information about the fix can be found in the commit 31167df7c21feb2a74d69a758a5226d83cbfe905 in the Linux Kernel source code repository.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
