PT-2024-35510

CVE-2024-53045

·

Published

2024-10-28

·

Updated

2025-09-29

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A bounds checker error in the dapm widget list create function has been resolved. The error occurred because the num widgets variable, which is used for bounds checking, was not set before the widgets array was filled. This could cause the bounds sanitizer to issue a warning or a kernel panic if CONFIG UBSAN TRAP is set. The patch sets the initial value of num widgets to the size of the widgets list calculated with list for each, and updates it with the actual number of added elements after the array is filled.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
ALSA-2025_16880
ALT-PU-2024-17211
OPENSUSE-SU-2024_4314-1
OPENSUSE-SU-2024_4316-1
SUSE-SU-2024:4314-1
SUSE-SU-2024:4316-1
SUSE-SU-2024:4318-1
SUSE-SU-2024:4387-1
SUSE-SU-2025:20163-1
SUSE-SU-2025:20164-1
SUSE-SU-2025:20246-1
SUSE-SU-2025:20247-1
USN-7276-1
USN-7277-1
USN-7310-1
USN-7449-1
USN-7449-2
USN-7450-1
USN-7451-1
USN-7452-1
USN-7453-1
USN-7468-1
USN-7523-1
USN-7524-1
Found an issue in the description? Have something to add? Feel free to write us 👾