ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback
In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback commit 1f5664351410 ("ASoC: lower "no backend DAIs enabled for ... Port" log severity") ignores -EINVAL error message on common soc_pcm_ret(). It is used from many functions, ignoring -EINVAL is over-kill. The reason why -EINVAL was ignored was it really should only be used upon invalid parameters coming from userspace and in that case we don't want to log an error since we do not want to give userspace a way to do a denial-of-service attack on the syslog / diskspace. So don't use soc_pcm_ret() on .prepare callback is better idea.
CVE-2024-58077
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2024-58077
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "1f566435141047ca7db26aa4b0b6647a25badaee",
"lessThan": "79b8c7c93beb4f5882c9ee5b9ba73354fa4bc9ee",
"versionType": "git"
},
{
"status": "affected",
"version": "1f566435141047ca7db26aa4b0b6647a25badaee",
"lessThan": "90778f31efdf44622065ebbe8d228284104bd26f",
"versionType": "git"
},
{
"status": "affected",
"version": "1f566435141047ca7db26aa4b0b6647a25badaee",
"lessThan": "8ec4e8c8e142933eaa8e1ed87168831069250e4e",
"versionType": "git"
},
{
"status": "affected",
"version": "1f566435141047ca7db26aa4b0b6647a25badaee",
"lessThan": "301c26a018acb94dd537a4418cefa0f654500c6f",
"versionType": "git"
}
],
"programFiles": [
"sound/soc/soc-pcm.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "6.5"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "6.5",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "6.6.78",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.14",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.13.3",
"versionType": "semver",
"lessThanOrEqual": "6.13.*"
},
{
"status": "unaffected",
"version": "6.14",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"sound/soc/soc-pcm.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2024-58077
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #26879 · Revision 1
- Added to Heist Feed
- Publisher date