Описание
In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-mach-common: Add missing error check for clock acquisition The acp_card_rt5682_init() and acp_card_rt5682s_init() functions did not check the return values of clk_get(). This could lead to a kernel crash when the invalid pointers are later dereferenced by clock core functions. Fix this by:
- Changing clk_get() to the device-managed devm_clk_get().
- Adding IS_ERR() checks immediately after each clock acquisition.
A flaw was found in the Advanced Linux Sound Architecture (ALSA) System on Chip (ASoC) AMD Audio CoProcessor (ACP) machine common driver within the Linux kernel. Theacp_card_rt5682_init()andacp_card_rt5682s_init()functions failed to validate the return values from clock acquisition calls. This oversight could lead to the dereferencing of invalid pointers by clock core functions, resulting in a kernel crash and a Denial of Service (DoS) for the system.
Отчет
A Moderate flaw was found in the Advanced Linux Sound Architecture (ALSA) AMD Audio CoProcessor (ACP) machine common driver in the Linux kernel. This vulnerability, affecting Red Hat Enterprise Linux 9 and Red Hat In-Vehicle OS 2, could allow a local attacker to trigger a kernel crash by dereferencing invalid pointers during clock acquisition, leading to a system Denial of Service. Exploitation requires a system with the affected AMD audio hardware and the corresponding kernel module loaded.
Меры по смягчению последствий
To mitigate this issue, if the AMD Audio CoProcessor is not required, the snd_soc_amd_acp_mach_common kernel module can be prevented from loading. Create a file named /etc/modprobe.d/blacklist-snd_soc_amd_acp_mach_common.conf with the content blacklist snd_soc_amd_acp_mach_common. After saving the file, regenerate the initramfs and reboot the system for the changes to take effect using dracut -f -v followed by reboot. This action may disable audio functionality on systems that rely on the AMD Audio CoProcessor.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | kernel | Fix deferred | ||
| Red Hat Enterprise Linux 6 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel | Not affected | ||
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel | Not affected | ||
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | ||
| Red Hat Enterprise Linux 9 | kernel | Fix deferred | ||
| Red Hat Enterprise Linux 9 | kernel-rt | Fix deferred |
Показывать по
Дополнительная информация
Статус:
EPSS
5.5 Medium
CVSS3
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-mach-common: Add missing error check for clock acquisition The acp_card_rt5682_init() and acp_card_rt5682s_init() functions did not check the return values of clk_get(). This could lead to a kernel crash when the invalid pointers are later dereferenced by clock core functions. Fix this by: 1. Changing clk_get() to the device-managed devm_clk_get(). 2. Adding IS_ERR() checks immediately after each clock acquisition.
In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-mach-common: Add missing error check for clock acquisition The acp_card_rt5682_init() and acp_card_rt5682s_init() functions did not check the return values of clk_get(). This could lead to a kernel crash when the invalid pointers are later dereferenced by clock core functions. Fix this by: 1. Changing clk_get() to the device-managed devm_clk_get(). 2. Adding IS_ERR() checks immediately after each clock acquisition.
ASoC: amd: acp-mach-common: Add missing error check for clock acquisition
In the Linux kernel, the following vulnerability has been resolved: A ...
In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-mach-common: Add missing error check for clock acquisition The acp_card_rt5682_init() and acp_card_rt5682s_init() functions did not check the return values of clk_get(). This could lead to a kernel crash when the invalid pointers are later dereferenced by clock core functions. Fix this by: 1. Changing clk_get() to the device-managed devm_clk_get(). 2. Adding IS_ERR() checks immediately after each clock acquisition.
EPSS
5.5 Medium
CVSS3