Description
In the Linux kernel, the following vulnerability has been resolved:
ASoC: SOF: Add some bounds checking to firmware data
Smatch complains about "head->full_size - head->header_size" can underflow. To some extent, we're always going to have to trust the firmware a bit. However, it's easy enough to add a check for negatives, and let's add a upper bounds check as well.
Metrics
CVSS 3.1 8.4/10
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= d2458baa799fff377660d86323dd20a3f4deecb4, < d133d67e7e724102d1e53009c4f88afaaf3e167c; >= d2458baa799fff377660d86323dd20a3f4deecb4, < ced7df8b3c5c4751244cad79011e86cf1f809153; >= d2458baa799fff377660d86323dd20a3f4deecb4, < 044e220667157fb9d59320341badec59cf45ba48; >= d2458baa799fff377660d86323dd20a3f4deecb4, < 9eeb8e1231f6450c574c1db979122e171a1813ab; >= d2458baa799fff377660d86323dd20a3f4deecb4, < 98f681b0f84cfc3a1d83287b77697679e0398306 |
| Linux | Linux | 5.19 |
| linux | linux_kernel | 5.19 |
| linux | linux_kernel | d2458baa799f |
References
- https://git.kernel.org/stable/c/044e220667157fb9d59320341badec59cf45ba48Patch
- https://git.kernel.org/stable/c/98f681b0f84cfc3a1d83287b77697679e0398306Patch
- https://git.kernel.org/stable/c/9eeb8e1231f6450c574c1db979122e171a1813abPatch
- https://git.kernel.org/stable/c/ced7df8b3c5c4751244cad79011e86cf1f809153Patch
- https://git.kernel.org/stable/c/d133d67e7e724102d1e53009c4f88afaaf3e167cPatch
- https://git.kernel.org/stable/c/044e220667157fb9d59320341badec59cf45ba48Patch
- https://git.kernel.org/stable/c/98f681b0f84cfc3a1d83287b77697679e0398306Patch
- https://git.kernel.org/stable/c/9eeb8e1231f6450c574c1db979122e171a1813abPatch
- https://git.kernel.org/stable/c/ced7df8b3c5c4751244cad79011e86cf1f809153Patch
- https://git.kernel.org/stable/c/d133d67e7e724102d1e53009c4f88afaaf3e167cPatch
Timeline
- Published
- Apr 28, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed