CVE-2024-53045

ASoC: dapm: fix bounds checker error in dapm_widget_list_create

Medium · published November 19, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
9.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ASoC: dapm: fix bounds checker error in dapm_widget_list_create

The widgets array in the snd_soc_dapm_widget_list has a __counted_by

attribute attached to it, which points to the num_widgets variable. This

attribute is used in bounds checking, and if it is not set before the

array is filled, then the bounds sanitizer will issue a warning or a

kernel panic if CONFIG_UBSAN_TRAP is set.

This patch sets the size of the widgets list calculated with

list_for_each as the initial value for num_widgets as it is used for

allocating memory for the array. It is updated with the actual number of

added elements after the array is filled.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00202 · 9.6th percentile
Published
2024-11-19T17:19Z
EPSS history
Timeline
  • 19 NOV 17:19Z
    ASoC: dapm: fix bounds checker error in dapm_widget_list_create
    cvelistv5