Linux Kernel ASoC Intel Driver NULL Pointer Dereference Vulnerability

A vulnerability in the Linux kernel's ASoC Intel driver for SoundWire (sof_sdw) can lead to a NULL pointer dereference. This issue occurs in the 'create_sdw_dailink' function, where the code fails to verify that the 'add_sidecar' callback is not NULL before invoking it. The original implementation assumed that if 'include_sidecar' was true, the corresponding codec would have an 'add_sidecar' callback. However, other codecs on the same link might lack this callback, potentially causing a crash.

Impact

Exploitation of this vulnerability can lead to a NULL pointer dereference, causing a system crash.

Reproduction

To reproduce this vulnerability, load a SoundWire link with a codec that does not provide an 'add_sidecar' callback while 'include_sidecar' is enabled. This will trigger the NULL pointer dereference in the 'create_sdw_dailink' function of the ASoC Intel driver.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed.