Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2021-46926
HistoryFeb 27, 2024 - 9:43 a.m.

CVE-2021-46926 ALSA: hda: intel-sdw-acpi: harden detection of controller

2024-02-2709:43:56
Linux
github.com
3
linux kernel
alsa
soundwire
vulnerability
detection
controller
logic change.

AI Score

6.6

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

ALSA: hda: intel-sdw-acpi: harden detection of controller

The existing code currently sets a pointer to an ACPI handle before
checking that it’s actually a SoundWire controller. This can lead to
issues where the graph walk continues and eventually fails, but the
pointer was set already.

This patch changes the logic so that the information provided to
the caller is set when a controller is found.

AI Score

6.6

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial