ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe
Summary
GSD-2022-1002443: ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe. Affects Kernel versions >= 531f67e41dcde1e358cf821d056241a66355cf03, < f8b7b9a0594715ecfbe6f18db2328d992242654a. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ASoC (Audio System on Chip) framework in the Linux Kernel provides support for audio devices on various embedded systems. The atmel driver is responsible for managing audio functionality on Atmel processors. The at91sam9g20ek_audio_probe function is a part of this driver and is used to initialize the audio device on the Atmel AT91SAM9G20EK development board.
Vulnerability Detail
The at91sam9g20ek_audio_probe function in the atmel driver lacks a call to of_node_put, leading to a reference count leak. This vulnerability can be exploited by an attacker to exhaust the available memory resources, potentially resulting in a denial of service (DoS) condition. The vulnerability was introduced in version v3.8 of the Linux Kernel and has been fixed in version v4.14.276.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the fix provided in the Linux Kernel version v4.14.276.
Conclusion
The atmel driver in the Linux Kernel is vulnerable to a reference count leak in the at91sam9g20ek_audio_probe function. This vulnerability can be exploited to cause a denial of service (DoS) condition. It is recommended to apply the fix provided in the Linux Kernel version v4.14.276. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
ASoC (Audio System on Chip) is a framework in the Linux Kernel that provides support for audio devices on embedded systems.
The atmel driver is responsible for managing audio functionality on Atmel processors.
at91sam9g20ek_audio_probe is a function in the atmel driver that initializes the audio device on the Atmel AT91SAM9G20EK development board.
A reference count leak occurs when a resource is not properly released, leading to a gradual depletion of available resources.
This vulnerability can be exploited to exhaust memory resources, potentially resulting in a denial of service (DoS) condition.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
