Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's soundwire subsystem can lead to improper enumeration of soundwire devices, potentially causing memory corruption. The issue arises because the current signaling mechanism fails to notify all current and future waiters and uses an incorrect reinitialization function. This flaw disrupts sound card probe deferrals, as codec drivers cannot recognize that a soundwire device is already connected when being reprobed. Additionally, some codec runtime power management implementations may experience similar issues, as they can time out while waiting for enumeration during resume, even though the device has already been enumerated.
The vulnerability can cause memory corruption and disrupt the proper enumeration of soundwire devices, leading to issues with sound card probing and codec runtime power management.
The vulnerability can be reproduced by using a Linux kernel version that includes the flawed soundwire enumeration signaling. When a soundwire device is attached, the system fails to properly signal that the device has been enumerated, which can cause timeouts during sound card probing and power management operations.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed. The specific commit that fixes this issue is available in the Linux kernel stable tree.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.