CVE-2021-47037 ASoC: q6afe-clocks: fix reprobing of the driver
A null pointer dereference in the Linux kernel Q6afe-clocks driver causes a system crash when the driver is reprobed after a firmware crash.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-47037?
CVE-2021-47037 is a medium-severity vulnerability in Linux kernel, published on 28 Feb 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
ASoC: q6afe-clocks: fix reprobing of the driver
Q6afe-clocks driver can get reprobed. For example if the APR services are restarted after the firmware crash. However currently Q6afe-clocks driver will oops because hw.init will get cleared during first _probe call. Rewrite the driver to fill the clock data at runtime rather than using big static array of clocks.
Which versions are affected by CVE-2021-47037?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2021-47037?
Apply the vendor's patch.
Is CVE-2021-47037 being exploited?
There is no known exploitation of CVE-2021-47037 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as DEBIAN-CVE-2021-47037, GHSA-8xhh-j9m8-989c, ROOT-OS-DEBIAN-11-CVE-2021-47037, UBUNTU-CVE-2021-47037.