Riskcovery

CVE-2023-53666

ASoC: codecs: wcd938x: fix missing mbhc init error handling

State
Published
Severity
Not scored
Published
Oct 7, 2025
Updated
May 11, 2026
Reserved
Oct 7, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: codecs: wcd938x: fix missing mbhc init error handling

MBHC initialisation can fail so add the missing error handling to avoid dereferencing an error pointer when later configuring the jack:

Unable to handle kernel paging request at virtual address fffffffffffffff8

pc : wcd_mbhc_start+0x28/0x380 [snd_soc_wcd_mbhc] lr : wcd938x_codec_set_jack+0x28/0x48 [snd_soc_wcd938x]

Call trace: wcd_mbhc_start+0x28/0x380 [snd_soc_wcd_mbhc] wcd938x_codec_set_jack+0x28/0x48 [snd_soc_wcd938x] snd_soc_component_set_jack+0x28/0x8c [snd_soc_core] qcom_snd_wcd_jack_setup+0x7c/0x19c [snd_soc_qcom_common] sc8280xp_snd_init+0x20/0x2c [snd_soc_sc8280xp] snd_soc_link_init+0x28/0x90 [snd_soc_core] snd_soc_bind_card+0x628/0xbfc [snd_soc_core] snd_soc_register_card+0xec/0x104 [snd_soc_core] devm_snd_soc_register_card+0x4c/0xa4 [snd_soc_core] sc8280xp_platform_probe+0xf0/0x108 [snd_soc_sc8280xp]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • bcee7ed09b8e70b65d5c04f5d1acd2cf4213c2f3 to before 5a34d252052b5da743ef82591c860fc947384d4eAffected
  • bcee7ed09b8e70b65d5c04f5d1acd2cf4213c2f3 to before bb241ae928c694e365c30c888c9eb02dcc812dfdAffected
  • bcee7ed09b8e70b65d5c04f5d1acd2cf4213c2f3 to before 31ee704c84c4bf4df8521ef1478c161f710d0f94Affected
  • bcee7ed09b8e70b65d5c04f5d1acd2cf4213c2f3 to before 7dfae2631bfbdebecd35fe7b472ab3cc95c9ed66Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 5.15.123 through 5.15.*Not affected
  • 6.1.42 through 6.1.*Not affected
  • 6.4.7 through 6.4.*Not affected
  • 6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.