CVE-2021-46926
MEDIUMLinux Kernel < 5.15.13 - Use-After-Free in ALSA SoundWire Controller Detection
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: intel-sdw-acpi: harden detection of controller The existing code currently sets a pointer to an ACPI handle before checking that it's actually a SoundWire controller. This can lead to issues where the graph walk continues and eventually fails, but the pointer was set already. This patch changes the logic so that the information provided to the caller is set when a controller is found.
References (2)
Core 2
Scores
CVSS v3
5.5
EPSS
0.0021
EPSS Percentile
11.3%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
Status
published
Products (7)
Linux/Linux
< 5.3
Linux/Linux
5.15.13 - 5.15.*
Linux/Linux
5.16
Linux/Linux
5.3
Linux/Linux
6f11586f4896ee448262747788a0a3faf0fe9066 - 385f287f9853da402d94278e59f594501c1d1dad
Linux/Linux
6f11586f4896ee448262747788a0a3faf0fe9066 - cce476954401e3421afafb25bbaa926050688b1d
linux/linux_kernel
< 5.15.13
Published
Feb 27, 2024
Tracked Since
Feb 18, 2026