⌘ + K

UBUNTU-CVE-2021-46926

Dashboard / Vulnerabilities / UBUNTU-CVE-2021-46926

UBUNTU-CVE-2021-46926

Published: 27 Feb 2024Last Modified: 9 Sept 2026

Upstream:

Aliases:

Summary:

Details: In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: intel-sdw-acpi: harden detection of controller The existing code currently sets a pointer to an ACPI handle before checking that it's actually a SoundWire controller. This can lead to issues where the graph walk continues and eventually fails, but the pointer was set already. This patch changes the logic so that the information provided to the caller is set when a controller is found.

References: https://ubuntu.com/security/CVE-2021-46926, https://git.kernel.org/linus/385f287f9853da402d94278e59f594501c1d1dad, https://git.kernel.org/stable/c/cce476954401e3421afafb25bbaa926050688b1d, https://git.kernel.org/stable/c/385f287f9853da402d94278e59f594501c1d1dad, https://www.cve.org/CVERecord?id=CVE-2021-46926, https://ubuntu.com/security/notices/USN-6973-1, https://ubuntu.com/security/notices/USN-6973-2, https://ubuntu.com/security/notices/USN-6973-3, https://ubuntu.com/security/notices/USN-6973-4, https://ubuntu.com/security/notices/USN-7006-1

Affected packages

Package

Name: linux-hwe-edge

Purl: pkg:deb/ubuntu/linux-hwe-edge?arch=source&distro=xenial

Affected ranges

Type: ECOSYSTEM

Events:

Introduced- 0

Fixed -None

Affected versions

4.8.0-28.30~16.04.1

4.8.0-30.32~16.04.1

4.8.0-32.34~16.04.1

4.8.0-34.36~16.04.1

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High