In the Linux kernel, the following vulnerability has been resolved:
ASoC: soc-pcm: don't use socpcmret() on .prepare callback
commit 1f5664351410 ("ASoC: lower "no backend DAIs enabled for ... Port" log severity") ignores -EINVAL error message on common socpcmret(). It is used from many functions, ignoring -EINVAL is over-kill.
The reason why -EINVAL was ignored was it really should only be used upon invalid parameters coming from userspace and in that case we don't want to log an error since we do not want to give userspace a way to do a denial-of-service attack on the syslog / diskspace.
So don't use socpcmret() on .prepare callback is better idea.
[
{
"id": "CVE-2024-58077-1278dcb4",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "_soc_pcm_ret",
"file": "sound/soc/soc-pcm.c"
},
"digest": {
"length": 335.0,
"function_hash": "264921710228963359553249400574040140194"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@90778f31efdf44622065ebbe8d228284104bd26f"
},
{
"id": "CVE-2024-58077-1c3d95cf",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "dpcm_be_dai_prepare",
"file": "sound/soc/soc-pcm.c"
},
"digest": {
"length": 802.0,
"function_hash": "201754143614226841145517011556932049521"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@90778f31efdf44622065ebbe8d228284104bd26f"
},
{
"id": "CVE-2024-58077-1ccf1d7b",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "dpcm_fe_dai_prepare",
"file": "sound/soc/soc-pcm.c"
},
"digest": {
"length": 879.0,
"function_hash": "9907557058865056437350432703078892323"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ec4e8c8e142933eaa8e1ed87168831069250e4e"
},
{
"id": "CVE-2024-58077-356d186a",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "sound/soc/soc-pcm.c"
},
"digest": {
"line_hashes": [
"160959364234106887809210665394675480414",
"107227088548004331278161081485913526511",
"17221408524948561725872374072238428300",
"161841599188228288373193613729389813751",
"15375579122975917304536962534311718658",
"125720016204437147254449202288422391102",
"94065186205168426635999949568035336282",
"225378852824367501468576862178281212717",
"113759842102760748611107583344515453418",
"174932068364519892995109748382350401976",
"141871713449439059005055930951073954342",
"98758401688576674954868706138714008824",
"43286104131074025536784130329468150674",
"42410033425120486124540658677026378697",
"304086960158165518364562187645173199206",
"338287633192221835934701903228758481394",
"64744943855640855043281368513842944643",
"133176480559712469759774219440195867418",
"268638071030724219747360948098252745567",
"3272798735069254205776563807463448141"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@301c26a018acb94dd537a4418cefa0f654500c6f"
},
{
"id": "CVE-2024-58077-420b9cc2",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "dpcm_fe_dai_prepare",
"file": "sound/soc/soc-pcm.c"
},
"digest": {
"length": 879.0,
"function_hash": "9907557058865056437350432703078892323"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@90778f31efdf44622065ebbe8d228284104bd26f"
},
{
"id": "CVE-2024-58077-47e3c204",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "__soc_pcm_prepare",
"file": "sound/soc/soc-pcm.c"
},
"digest": {
"length": 687.0,
"function_hash": "2523082728778675058935846897675425798"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@79b8c7c93beb4f5882c9ee5b9ba73354fa4bc9ee"
},
{
"id": "CVE-2024-58077-4cf9a014",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "sound/soc/soc-pcm.c"
},
"digest": {
"line_hashes": [
"160959364234106887809210665394675480414",
"107227088548004331278161081485913526511",
"17221408524948561725872374072238428300",
"161841599188228288373193613729389813751",
"15375579122975917304536962534311718658",
"125720016204437147254449202288422391102",
"94065186205168426635999949568035336282",
"225378852824367501468576862178281212717",
"113759842102760748611107583344515453418",
"174932068364519892995109748382350401976",
"141871713449439059005055930951073954342",
"98758401688576674954868706138714008824",
"43286104131074025536784130329468150674",
"42410033425120486124540658677026378697",
"304086960158165518364562187645173199206",
"338287633192221835934701903228758481394",
"64744943855640855043281368513842944643",
"133176480559712469759774219440195867418",
"268638071030724219747360948098252745567",
"3272798735069254205776563807463448141"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@90778f31efdf44622065ebbe8d228284104bd26f"
},
{
"id": "CVE-2024-58077-50d8b3e7",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "_soc_pcm_ret",
"file": "sound/soc/soc-pcm.c"
},
"digest": {
"length": 335.0,
"function_hash": "264921710228963359553249400574040140194"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@301c26a018acb94dd537a4418cefa0f654500c6f"
},
{
"id": "CVE-2024-58077-70e27676",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "__soc_pcm_prepare",
"file": "sound/soc/soc-pcm.c"
},
"digest": {
"length": 687.0,
"function_hash": "2523082728778675058935846897675425798"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ec4e8c8e142933eaa8e1ed87168831069250e4e"
},
{
"id": "CVE-2024-58077-82e7a44b",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "dpcm_be_dai_prepare",
"file": "sound/soc/soc-pcm.c"
},
"digest": {
"length": 802.0,
"function_hash": "201754143614226841145517011556932049521"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ec4e8c8e142933eaa8e1ed87168831069250e4e"
},
{
"id": "CVE-2024-58077-87cab07b",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "__soc_pcm_prepare",
"file": "sound/soc/soc-pcm.c"
},
"digest": {
"length": 687.0,
"function_hash": "2523082728778675058935846897675425798"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@301c26a018acb94dd537a4418cefa0f654500c6f"
},
{
"id": "CVE-2024-58077-9b0bc3f1",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "__soc_pcm_prepare",
"file": "sound/soc/soc-pcm.c"
},
"digest": {
"length": 687.0,
"function_hash": "2523082728778675058935846897675425798"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@90778f31efdf44622065ebbe8d228284104bd26f"
},
{
"id": "CVE-2024-58077-a04d7b15",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "dpcm_fe_dai_prepare",
"file": "sound/soc/soc-pcm.c"
},
"digest": {
"length": 879.0,
"function_hash": "9907557058865056437350432703078892323"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@301c26a018acb94dd537a4418cefa0f654500c6f"
},
{
"id": "CVE-2024-58077-a6bec227",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "sound/soc/soc-pcm.c"
},
"digest": {
"line_hashes": [
"160959364234106887809210665394675480414",
"107227088548004331278161081485913526511",
"17221408524948561725872374072238428300",
"161841599188228288373193613729389813751",
"15375579122975917304536962534311718658",
"125720016204437147254449202288422391102",
"94065186205168426635999949568035336282",
"225378852824367501468576862178281212717",
"113759842102760748611107583344515453418",
"174932068364519892995109748382350401976",
"141871713449439059005055930951073954342",
"98758401688576674954868706138714008824",
"43286104131074025536784130329468150674",
"42410033425120486124540658677026378697",
"304086960158165518364562187645173199206",
"338287633192221835934701903228758481394",
"64744943855640855043281368513842944643",
"133176480559712469759774219440195867418",
"268638071030724219747360948098252745567",
"3272798735069254205776563807463448141"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@79b8c7c93beb4f5882c9ee5b9ba73354fa4bc9ee"
},
{
"id": "CVE-2024-58077-bc83b60d",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "_soc_pcm_ret",
"file": "sound/soc/soc-pcm.c"
},
"digest": {
"length": 335.0,
"function_hash": "264921710228963359553249400574040140194"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ec4e8c8e142933eaa8e1ed87168831069250e4e"
},
{
"id": "CVE-2024-58077-c166c2e1",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "dpcm_fe_dai_prepare",
"file": "sound/soc/soc-pcm.c"
},
"digest": {
"length": 879.0,
"function_hash": "9907557058865056437350432703078892323"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@79b8c7c93beb4f5882c9ee5b9ba73354fa4bc9ee"
},
{
"id": "CVE-2024-58077-c346ca9f",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "dpcm_be_dai_prepare",
"file": "sound/soc/soc-pcm.c"
},
"digest": {
"length": 802.0,
"function_hash": "201754143614226841145517011556932049521"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@79b8c7c93beb4f5882c9ee5b9ba73354fa4bc9ee"
},
{
"id": "CVE-2024-58077-d539b63d",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "sound/soc/soc-pcm.c"
},
"digest": {
"line_hashes": [
"160959364234106887809210665394675480414",
"107227088548004331278161081485913526511",
"17221408524948561725872374072238428300",
"161841599188228288373193613729389813751",
"15375579122975917304536962534311718658",
"125720016204437147254449202288422391102",
"94065186205168426635999949568035336282",
"225378852824367501468576862178281212717",
"113759842102760748611107583344515453418",
"174932068364519892995109748382350401976",
"141871713449439059005055930951073954342",
"98758401688576674954868706138714008824",
"43286104131074025536784130329468150674",
"42410033425120486124540658677026378697",
"304086960158165518364562187645173199206",
"338287633192221835934701903228758481394",
"64744943855640855043281368513842944643",
"133176480559712469759774219440195867418",
"268638071030724219747360948098252745567",
"3272798735069254205776563807463448141"
],
"threshold": 0.9
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ec4e8c8e142933eaa8e1ed87168831069250e4e"
},
{
"id": "CVE-2024-58077-d5843f28",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "_soc_pcm_ret",
"file": "sound/soc/soc-pcm.c"
},
"digest": {
"length": 335.0,
"function_hash": "264921710228963359553249400574040140194"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@79b8c7c93beb4f5882c9ee5b9ba73354fa4bc9ee"
},
{
"id": "CVE-2024-58077-de422418",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "dpcm_be_dai_prepare",
"file": "sound/soc/soc-pcm.c"
},
"digest": {
"length": 802.0,
"function_hash": "201754143614226841145517011556932049521"
},
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@301c26a018acb94dd537a4418cefa0f654500c6f"
}
]