PT-2026-98716 · Linux · Linux

CVE-2026-98053

·

Publicado

2026-09-25

·

Atualizado

2026-09-25

Nenhuma

Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.
In the Linux kernel, the following vulnerability has been resolved:
ASoC: Intel: avs: Refactor and fix init config access
Existing code accesses enties found in ->init configs array through indexes that are part of ->config ids array. Those two are limited by: ->num init configs and ->num config ids respectively. Using ID larger or equal to ->num init configs leads to out-of-bounds access:
avs path module send init configs() loop: (...) &acomp->tplg->init configs[ids[i]] ^ out-of-bounds candidate
Rather than adding another if-statement, refactor the code. There is no need to store the IDs, have a list of pointers to actual config-entries instead. As the verification of ->init config entries does not differ from verification of other types that are part of the topology.c file, simply reuse the code.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2026-98053

Produtos afetados

Linux