ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.6.160, 6.12.113, 6.18.56, 7.2.10
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type stream_config is not initialized before being passed to sdw_stream_add_slave(). The type field may contain garbage and is later copied to stream->type by sdw_config_stream(). Zero-initialize stream_config so type defaults to SDW_STREAM_PCM. While at it, use snd_sdw_params_to_config() helper instead of open-coding the same logic.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 2b7aecd58528551e6e3da58091ff7ceb4718e6be · fixed in 30a60e74ee71de027bf1387ac20d73e863bbf77b; From 2b7aecd58528551e6e3da58091ff7ceb4718e6be · fixed in 4e337c24c0a97fcdb394f954208971de5d372066; From 2b7aecd58528551e6e3da58091ff7ceb4718e6be · fixed in d195c8c763fdd0a7f74a34973f8946215a708f1e; From 2b7aecd58528551e6e3da58091ff7ceb4718e6be · fixed in 7791ebf56eb4ab6b7a20252757a3029bc8068715; From 2b7aecd58528551e6e3da58091ff7ceb4718e6be · fixed in 174d160884199cad97413f33fe1b56027dc0d3e1
- Linux Linux
6.6
- KernelLinux
From 6.6.0 · fixed in 6.6.160; From 6.7.0 · fixed in 6.12.113; From 6.13.0 · fixed in 6.18.56; From 6.19.0 · fixed in 7.2.10