Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix missing pointer check in hda_component_manager_init function The __component_match_add function may assign the 'matchptr' pointer the value ERR_PTR(-ENOMEM), which will subsequently be dereferenced. The call stack leading to the error looks like this: hda_component_manager_init |-> component_match_add |-> component_match_add_release |-> __component_match_add ( ... ,**matchptr, ... ) |-> *matchptr = ERR_PTR(-ENOMEM); // assign |-> component_master_add_with_match( ... match) |-> component_match_realloc(match, match->num); // dereference Add IS_ERR() check to prevent the crash. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
ae7abe36e352eddf8e30d3b1ea3fb402514ba13b to < b044aa6ae63391ba40c93ca5d476d276cb17db1baffectedae7abe36e352eddf8e30d3b1ea3fb402514ba13b to < 1c3f4b15eb1850558d7d4da74b98cffbb8121721affectedae7abe36e352eddf8e30d3b1ea3fb402514ba13b to < 218a8504e62fc2c8a1fd12523346b7a2b9bd2474affectedae7abe36e352eddf8e30d3b1ea3fb402514ba13b to < 47d1b9ca923b55c3f407788f1f15b04957e0e027affectedae7abe36e352eddf8e30d3b1ea3fb402514ba13b to < 1cf11d80db5df805b538c942269e05a65bcaf5bcaffected
Linux Linux
Default version status: affected
5.17affected0 to < 5.17unaffected6.1.189 to ≤ 6.1.*unaffected6.6.158 to ≤ 6.6.*unaffected6.12.59 to ≤ 6.12.*unaffected6.17.5 to ≤ 6.17.*unaffected6.18 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/b044aa6ae63391ba40c93ca5d476d276cb17db1b ↗
- https://git.kernel.org/stable/c/1c3f4b15eb1850558d7d4da74b98cffbb8121721 ↗
- https://git.kernel.org/stable/c/218a8504e62fc2c8a1fd12523346b7a2b9bd2474 ↗
- https://git.kernel.org/stable/c/47d1b9ca923b55c3f407788f1f15b04957e0e027 ↗
- https://git.kernel.org/stable/c/1cf11d80db5df805b538c942269e05a65bcaf5bc ↗