In the Linux kernel, the following vulnerability has been resolved:
ASoC: codecs: wcd938x: fix missing mbhc init error handling
MBHC initialisation can fail so add the missing error handling to avoid dereferencing an error pointer when later configuring the jack:
Unable to handle kernel paging request at virtual address fffffffffffffff8
pc : wcd_mbhc_start+0x28/0x380 [snd_soc_wcd_mbhc]
lr : wcd938x_codec_set_jack+0x28/0x48 [snd_soc_wcd938x]
Call trace:
wcd_mbhc_start+0x28/0x380 [snd_soc_wcd_mbhc]
wcd938x_codec_set_jack+0x28/0x48 [snd_soc_wcd938x]
snd_soc_component_set_jack+0x28/0x8c [snd_soc_core]
qcom_snd_wcd_jack_setup+0x7c/0x19c [snd_soc_qcom_common]
sc8280xp_snd_init+0x20/0x2c [snd_soc_sc8280xp]
snd_soc_link_init+0x28/0x90 [snd_soc_core]
snd_soc_bind_card+0x628/0xbfc [snd_soc_core]
snd_soc_register_card+0xec/0x104 [snd_soc_core]
devm_snd_soc_register_card+0x4c/0xa4 [snd_soc_core]
sc8280xp_platform_probe+0xf0/0x108 [snd_soc_sc8280xp]
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53666.json",
"cna_assigner": "Linux"
}[
{
"id": "CVE-2023-53666-23b8f62d",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@31ee704c84c4bf4df8521ef1478c161f710d0f94",
"target": {
"function": "wcd938x_mbhc_init",
"file": "sound/soc/codecs/wcd938x.c"
},
"digest": {
"length": 1006.0,
"function_hash": "204235336769490217715170897293714209047"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53666-6bde45a2",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bb241ae928c694e365c30c888c9eb02dcc812dfd",
"target": {
"function": "wcd938x_mbhc_init",
"file": "sound/soc/codecs/wcd938x.c"
},
"digest": {
"length": 1006.0,
"function_hash": "204235336769490217715170897293714209047"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53666-7d77b399",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bb241ae928c694e365c30c888c9eb02dcc812dfd",
"target": {
"file": "sound/soc/codecs/wcd938x.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"333470588040544033427202373018497644616",
"56451983389239493478445717876609457761",
"262093173341805766574137044029089275175",
"69241350034999923100393110259125256221"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-53666-b474ee01",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a34d252052b5da743ef82591c860fc947384d4e",
"target": {
"function": "wcd938x_mbhc_init",
"file": "sound/soc/codecs/wcd938x.c"
},
"digest": {
"length": 1006.0,
"function_hash": "204235336769490217715170897293714209047"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53666-b6780967",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7dfae2631bfbdebecd35fe7b472ab3cc95c9ed66",
"target": {
"file": "sound/soc/codecs/wcd938x.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"333470588040544033427202373018497644616",
"56451983389239493478445717876609457761",
"262093173341805766574137044029089275175",
"69241350034999923100393110259125256221"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-53666-b9e93a9c",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@31ee704c84c4bf4df8521ef1478c161f710d0f94",
"target": {
"file": "sound/soc/codecs/wcd938x.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"333470588040544033427202373018497644616",
"56451983389239493478445717876609457761",
"262093173341805766574137044029089275175",
"69241350034999923100393110259125256221"
]
},
"signature_type": "Line"
},
{
"id": "CVE-2023-53666-cdf1081a",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7dfae2631bfbdebecd35fe7b472ab3cc95c9ed66",
"target": {
"function": "wcd938x_mbhc_init",
"file": "sound/soc/codecs/wcd938x.c"
},
"digest": {
"length": 1006.0,
"function_hash": "204235336769490217715170897293714209047"
},
"signature_type": "Function"
},
{
"id": "CVE-2023-53666-f1afb707",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a34d252052b5da743ef82591c860fc947384d4e",
"target": {
"file": "sound/soc/codecs/wcd938x.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"333470588040544033427202373018497644616",
"56451983389239493478445717876609457761",
"262093173341805766574137044029089275175",
"69241350034999923100393110259125256221"
]
},
"signature_type": "Line"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53666.json"