CVE-2021-46926: ALSA: hda: intel-sdw-acpi: harden detection of controller
In the Linux kernel, the following vulnerability has been resolved:
ALSA: hda: intel-sdw-acpi: harden detection of controller
The existing code currently sets a pointer to an ACPI handle before checking that it's actually a SoundWire controller. This can lead to issues where the graph walk continues and eventually fails, but the pointer was set already.
This patch changes the logic so that the information provided to the caller is set when a controller is found.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-46926?
CVE-2021-46926 has a moderate severity rating as it involves potential issues with controller detection in the ALSA subsystem of the Linux kernel.
How do I fix CVE-2021-46926?
To fix CVE-2021-46926, you should update your Linux kernel to a version that includes the patches, specifically versions 5.10.226-1 or higher.
Which Linux kernel versions are affected by CVE-2021-46926?
CVE-2021-46926 affects Linux kernel versions up to and including 5.15.13.
Is CVE-2021-46926 specific to a particular Linux distribution?
CVE-2021-46926 is not limited to a single distribution, but it is known to impact Debian packages and the Linux kernel across various distributions.
What components of the Linux kernel are involved in CVE-2021-46926?
CVE-2021-46926 specifically involves the ALSA subsystem and its handling of SoundWire controllers in the Linux kernel.