ASoC: amd: acp-mach-common: Add missing error check for clock acquisition
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.6.160, 6.12.114, 6.18.57, 6.19.9
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-mach-common: Add missing error check for clock acquisition The acp_card_rt5682_init() and acp_card_rt5682s_init() functions did not check the return values of clk_get(). This could lead to a kernel crash when the invalid pointers are later dereferenced by clock core functions. Fix this by: 1. Changing clk_get() to the device-managed devm_clk_get(). 2. Adding IS_ERR() checks immediately after each clock acquisition.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From d4c750f2c7d44b5b39e197308bc3f510205bba4b · fixed in a71ce398347fed9422dbd5c6458f7f8348012c64; From d4c750f2c7d44b5b39e197308bc3f510205bba4b · fixed in 53682a55cac6f159311c63d04f3d7ba64a8a455a; From d4c750f2c7d44b5b39e197308bc3f510205bba4b · fixed in e0e31a7ed1191c12a28763bb70c4c7f5adadc79d; From d4c750f2c7d44b5b39e197308bc3f510205bba4b · fixed in 0cee68fb7f4cf1562e067c5a82d25062a973b0d0; From d4c750f2c7d44b5b39e197308bc3f510205bba4b · fixed in 30c64fb9839949f085c8eb55b979cbd8a4c51f00
- Linux Linux
5.16
- KernelLinux
From 5.16.0 · fixed in 6.6.160; From 6.7.0 · fixed in 6.12.114; From 6.13.0 · fixed in 6.18.57; From 6.19.0 · fixed in 6.19.9