Sergey Senozhatsky

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: The issue is related to memory leakage in the zram device when it has multi-streams and is reset without freeing secondary algorithms names. This can be resolved by using kfree() to free the secondary algorithms names. The estimated number of potentially affected devices is not specified. There is no information about real-world incidents where this issue was exploited. Recommendations: For Linux kernel versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider implementing a custom solution to free secondary algorithms names when resetting the zram device to prevent memory leakage.

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** An out-of-bounds read issue exists in the `sof get control data()` function within the `sound/soc/sof/ipc3-topology.c` module of the Linux kernel SoC sound support. The issue occurs because the function expects the payload to be of bytes type, but it also handles other control types using a payload parsing implementation that is only valid for bytes. A malicious actor could craft a topology to trigger this out-of-bounds access, potentially leading to a denial of service or unauthorized access to protected information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.