CVE-2023-53666: ASoC: codecs: wcd938x: fix missing mbhc init error handling
In the Linux kernel, the following vulnerability has been resolved:
ASoC: codecs: wcd938x: fix missing mbhc init error handling
MBHC initialisation can fail so add the missing error handling to avoid dereferencing an error pointer when later configuring the jack:
Unable to handle kernel paging request at virtual address fffffffffffffff8
pc : wcdmbhcstart+0x28/0x380 [sndsocwcdmbhc] lr : wcd938xcodecsetjack+0x28/0x48 [sndsocwcd938x]
Call trace: wcdmbhcstart+0x28/0x380 [sndsocwcdmbhc] wcd938xcodecsetjack+0x28/0x48 [sndsocwcd938x] sndsoccomponentsetjack+0x28/0x8c [sndsoccore] qcomsndwcdjacksetup+0x7c/0x19c [sndsocqcomcommon] sc8280xpsndinit+0x20/0x2c [sndsocsc8280xp] sndsoclinkinit+0x28/0x90 [sndsoccore] sndsocbindcard+0x628/0xbfc [sndsoccore] sndsocregistercard+0xec/0x104 [sndsoccore] devmsndsocregistercard+0x4c/0xa4 [sndsoccore] sc8280xpplatformprobe+0xf0/0x108 [sndsocsc8280xp]
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53666?
CVE-2023-53666 has a medium severity rating due to potential error handling issues in the Linux kernel.
How do I fix CVE-2023-53666?
To fix CVE-2023-53666, update to the latest version of the Linux kernel where the vulnerability has been resolved.
What components are affected by CVE-2023-53666?
CVE-2023-53666 affects the ASoC codec subsystem, specifically related to the wcd938x codec in the Linux kernel.
What type of vulnerability is CVE-2023-53666?
CVE-2023-53666 is an error handling vulnerability that could lead to dereferencing an error pointer.
Is there a public exploit for CVE-2023-53666?
As of now, there are no known public exploits for CVE-2023-53666.