CVE-2021-47502

A flaw was found in the Linux kernel's wcd934x audio codec driver. The driver fails to verify whether an audio channel is available before adding it to a digital audio interface channel list, or whether the channel is present before removal. A local user could exploit this issue to corrupt internal kernel list structures, resulting in a system crash and Denial of Service (DoS).

This vulnerability is rated as having a Low severity for Red Hat Enterprise Linux because exploitation requires local access on systems equipped with specialized Qualcomm audio hardware, limiting the blast radius to a local denial of service. The affected WCD934x codec driver is specific to embedded Qualcomm platforms and is not utilized in standard enterprise server hardware deployments. Consequently, systems running on typical server architectures are not exposed to this issue during normal operation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.