CVE-2021-47502

CVE-2021-47502

High · published May 24, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
14.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ASoC: codecs: wcd934x: handle channel mappping list correctly

Currently each channel is added as list to dai channel list, however

there is danger of adding same channel to multiple dai channel list

which endups corrupting the other list where its already added.

This patch ensures that the channel is actually free before adding to

the dai channel list and also ensures that the channel is on the list

before deleting it.

This check was missing previously, and we did not hit this issue as

we were testing very simple usecases with sequence of amixer commands.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00245 · 14.8th percentile
Published
2024-05-24T19:15Z
Affected products (6)
ProductVersionsFixed in
linux/linux_kernel≥ 5.6, < 5.10.855.10.85
linux/linux_kernel≥ 5.11, < 5.15.85.15.8
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (6)
EPSS history
Timeline
  • 24 MAY 15:01Z
    ASoC: codecs: wcd934x: handle channel mappping list correctly
    cvelistv5