cve/published/2021/CVE-2021-47502.json

{
   "containers": {
      "cna": {
         "providerMetadata": {
            "orgId": "f4215fc3-5b6b-47ff-a258-f7189bd81038"
         },
         "descriptions": [
            {
               "lang": "en",
               "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: codecs: wcd934x: handle channel mappping list correctly\n\nCurrently each channel is added as list to dai channel list, however\nthere is danger of adding same channel to multiple dai channel list\nwhich endups corrupting the other list where its already added.\n\nThis patch ensures that the channel is actually free before adding to\nthe dai channel list and also ensures that the channel is on the list\nbefore deleting it.\n\nThis check was missing previously, and we did not hit this issue as\nwe were testing very simple usecases with sequence of amixer commands."
            }
         ],
         "affected": [
            {
               "product": "Linux",
               "vendor": "Linux",
               "defaultStatus": "unaffected",
               "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
               "programFiles": [
                  "sound/soc/codecs/wcd934x.c"
               ],
               "versions": [
                  {
                     "version": "dd9eb19b567303e4b92747dcfb5deedb182af111",
                     "lessThan": "1089dac26c6b4b833323ae6c0ceab29fb30ede72",
                     "status": "affected",
                     "versionType": "git"
                  },
                  {
                     "version": "dd9eb19b567303e4b92747dcfb5deedb182af111",
                     "lessThan": "339ffb5b56005582aacc860524d2d208604049d1",
                     "status": "affected",
                     "versionType": "git"
                  },
                  {
                     "version": "dd9eb19b567303e4b92747dcfb5deedb182af111",
                     "lessThan": "23ba28616d3063bd4c4953598ed5e439ca891101",
                     "status": "affected",
                     "versionType": "git"
                  }
               ]
            },
            {
               "product": "Linux",
               "vendor": "Linux",
               "defaultStatus": "affected",
               "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
               "programFiles": [
                  "sound/soc/codecs/wcd934x.c"
               ],
               "versions": [
                  {
                     "version": "5.6",
                     "status": "affected"
                  },
                  {
                     "version": "0",
                     "lessThan": "5.6",
                     "status": "unaffected",
                     "versionType": "semver"
                  },
                  {
                     "version": "5.10.85",
                     "lessThanOrEqual": "5.10.*",
                     "status": "unaffected",
                     "versionType": "semver"
                  },
                  {
                     "version": "5.15.8",
                     "lessThanOrEqual": "5.15.*",
                     "status": "unaffected",
                     "versionType": "semver"
                  },
                  {
                     "version": "5.16",
                     "lessThanOrEqual": "*",
                     "status": "unaffected",
                     "versionType": "original_commit_for_fix"
                  }
               ]
            }
         ],
         "cpeApplicability": [
            {
               "nodes": [
                  {
                     "operator": "OR",
                     "negate": false,
                     "cpeMatch": [
                        {
                           "vulnerable": true,
                           "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                           "versionStartIncluding": "5.6",
                           "versionEndExcluding": "5.10.85"
                        },
                        {
                           "vulnerable": true,
                           "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                           "versionStartIncluding": "5.6",
                           "versionEndExcluding": "5.15.8"
                        },
                        {
                           "vulnerable": true,
                           "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                           "versionStartIncluding": "5.6",
                           "versionEndExcluding": "5.16"
                        }
                     ]
                  }
               ]
            }
         ],
         "references": [
            {
               "url": "https://git.kernel.org/stable/c/1089dac26c6b4b833323ae6c0ceab29fb30ede72"
            },
            {
               "url": "https://git.kernel.org/stable/c/339ffb5b56005582aacc860524d2d208604049d1"
            },
            {
               "url": "https://git.kernel.org/stable/c/23ba28616d3063bd4c4953598ed5e439ca891101"
            }
         ],
         "title": "ASoC: codecs: wcd934x: handle channel mappping list correctly",
         "x_generator": {
            "engine": "bippy-1.2.0"
         }
      }
   },
   "cveMetadata": {
      "assignerOrgId": "f4215fc3-5b6b-47ff-a258-f7189bd81038",
      "cveID": "CVE-2021-47502",
      "requesterUserId": "gregkh@kernel.org",
      "serial": "1",
      "state": "PUBLISHED"
   },
   "dataType": "CVE_RECORD",
   "dataVersion": "5.0"
}