PT-2026-98716 · Linux · Linux
CVE-2026-98053
·
Publicado
2026-09-25
·
Atualizado
2026-09-25
Nenhuma
Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.
In the Linux kernel, the following vulnerability has been resolved:
ASoC: Intel: avs: Refactor and fix init config access
Existing code accesses enties found in ->init configs array through
indexes that are part of ->config ids array. Those two are limited by:
->num init configs and ->num config ids respectively. Using ID larger
or equal to ->num init configs leads to out-of-bounds access:
avs path module send init configs()
loop:
(...) &acomp->tplg->init configs[ids[i]]
^ out-of-bounds candidate
Rather than adding another if-statement, refactor the code. There is no
need to store the IDs, have a list of pointers to actual config-entries
instead. As the verification of ->init config entries does not differ from
verification of other types that are part of the topology.c file, simply
reuse the code.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Linux