Linux Kernel Vulnerability in Greybus Audio Helper Code

CVE-2022-50400

What is CVE-2022-50400?

A flaw in the greybus audio_helper code within the Linux kernel allows for potential memory leaks and the unintended removal of debugfs entries. This occurs due to improper handling of a debugfs file not created by the audio_helper but by the sound core. The issue arises from faulty debugfs logic, which, if executed, may lead to a systemic disruption by affecting all debugfs entries. To rectify this, all debuggable features associated with the audio_helper should be eliminated, ensuring greater stability and system integrity. A thorough revisit of the debugfs_lookup() functionality is suggested for any necessary future implementations.

References