ACK: [SRU][F][PATCH 0/1] CVE-2021-46926

[Kevin Becker]

On Mon, Jul 15, 2024 at 3:43 PM Bethany Jamison
<bethany.jamison at canonical.com> wrote:
>
> [Impact]
>
> ALSA: hda: intel-sdw-acpi: harden detection of controller
>
> The existing code currently sets a pointer to an ACPI handle before
> checking that it's actually a SoundWire controller. This can lead to
> issues where the graph walk continues and eventually fails, but the
> pointer was set already.
>
> This patch changes the logic so that the information provided to
> the caller is set when a controller is found.
>
> [Fix]
>
> Noble:  not affected
> Jammy:  not affected
> Focal:  Backported - context conflict due to commits 6d2c666 (soundwire:
>         intel: transition to 3 steps initialization) and 08c2a4b (ALSA:
>         hda: move Intel SoundWire ACPI scan to dedicated module) which
>         could not be applied, fix change implemented as given
> Bionic: not affected
> Xenial: not affected
> Trusty: not affected
>
> [Test Case]
>
> Compile and boot tested.
>
> [Where problems could occur]
>
> This fix affects those who use Intel SoundWire, an issue with this fix
> would be visible to the user via unpredicted system behavior.
>
> Libin Yang (1):
>   ALSA: hda: intel-sdw-acpi: harden detection of controller
>
>  drivers/soundwire/intel_init.c | 5 +++--
>  1 file changed, 3 insertions(+), 2 deletions(-)
>
> --

Acked-by: Kevin Becker <kevin.becker at canonical.com>