https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 08:31:34 +0000 https://vulnerability.circl.lu/vuln/cve-2021-47650 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ASoC: soc-compress: prevent the potentially use of null pointer</p> <p>There is one call trace that snd_soc_register_card() -&gt;snd_soc_bind_card()-&gt;soc_init_pcm_runtime() -&gt;snd_soc_dai_compress_new()-&gt;snd_soc_new_compress(). In the trace the &#39;codec_dai&#39; transfers from card-&gt;dai_link, and we can see from the snd_soc_add_pcm_runtime() in snd_soc_bind_card() that, if value of card-&gt;dai_link-&gt;num_codecs is 0, then &#39;codec_dai&#39; could be null pointer caused by index out of bound in &#39;asoc_rtd_to_codec(rtd, 0)&#39;. And snd_soc_register_card() is called by various platforms. Therefore, it is better to add the check in the case of misusing. And because &#39;cpu_dai&#39; has already checked in soc_init_pcm_runtime(), there is no need to check again. Adding the check as follow, then if &#39;codec_dai&#39; is null, snd_soc_new_compress() will not pass through the check &#39;if (playback + capture != 1)&#39;, avoiding the leftover use of &#39;codec_dai&#39;.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ASoC: soc-compress: prevent the potentially use of null pointer</p> <p>There is one call trace that snd_soc_register_card() -&gt;snd_soc_bind_card()-&gt;soc_init_pcm_runtime() -&gt;snd_soc_dai_compress_new()-&gt;snd_soc_new_compress(). In the trace the &#39;codec_dai&#39; transfers from card-&gt;dai_link, and we can see from the snd_soc_add_pcm_runtime() in snd_soc_bind_card() that, if value of card-&gt;dai_link-&gt;num_codecs is 0, then &#39;codec_dai&#39; could be null pointer caused by index out of bound in &#39;asoc_rtd_to_codec(rtd, 0)&#39;. And snd_soc_register_card() is called by various platforms. Therefore, it is better to add the check in the case of misusing. And because &#39;cpu_dai&#39; has already checked in soc_init_pcm_runtime(), there is no need to check again. Adding the check as follow, then if &#39;codec_dai&#39; is null, snd_soc_new_compress() will not pass through the check &#39;if (playback + capture != 1)&#39;, avoiding the leftover use of &#39;codec_dai&#39;.</p> https://vulnerability.circl.lu/vuln/cve-2021-47650