CVE-2024-57880

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sof_sdw: Add space for a terminator into DAIs array The code uses the initialised member of the asoc_sdw_dailink struct to determine if a member of the array is in use. However in the case the array is completely full this will lead to an access 1 past the end of the array, expand the array by one entry to include a space for a terminator.

Reserved 2025-01-11 | Published 2025-01-11 | Updated 2025-01-11 | Assigner Linux

Product status

Default status
unaffected

27fd36aefa0013bea1cf6948e2e825e9b8cff97a before b21a849764a4111b0bc14a5ffe987a0582419de2
affected

27fd36aefa0013bea1cf6948e2e825e9b8cff97a before 255cc582e6e16191a20d54bcdbca6c91d3e90c5e
affected

Default status
affected

6.10
affected

Any version before 6.10
unaffected

6.12.6
unaffected

6.13-rc3
unaffected

References

git.kernel.org/...c/b21a849764a4111b0bc14a5ffe987a0582419de2

git.kernel.org/...c/255cc582e6e16191a20d54bcdbca6c91d3e90c5e

cve.org (CVE-2024-57880)

nvd.nist.gov (CVE-2024-57880)

Download JSON