CVE-2021-46926

MEDIUM

Linux Kernel < 5.15.13 - Use-After-Free in ALSA SoundWire Controller Detection

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: intel-sdw-acpi: harden detection of controller The existing code currently sets a pointer to an ACPI handle before checking that it's actually a SoundWire controller. This can lead to issues where the graph walk continues and eventually fails, but the pointer was set already. This patch changes the logic so that the information provided to the caller is set when a controller is found.

Scores

CVSS v3 5.5
EPSS 0.0021
EPSS Percentile 11.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (7)
Linux/Linux < 5.3
Linux/Linux 5.15.13 - 5.15.*
Linux/Linux 5.16
Linux/Linux 5.3
Linux/Linux 6f11586f4896ee448262747788a0a3faf0fe9066 - 385f287f9853da402d94278e59f594501c1d1dad
Linux/Linux 6f11586f4896ee448262747788a0a3faf0fe9066 - cce476954401e3421afafb25bbaa926050688b1d
linux/linux_kernel < 5.15.13
Published Feb 27, 2024
Tracked Since Feb 18, 2026