Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() snd_hda_get_connections() can return a negative error code. It may lead to accessing 'conn' array at a negative index. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
30b4503378c976cf66201a1e81820519f6bd79ac to < 437e50ef6290ac835d526d0e45f466a0aa69ba1baffected30b4503378c976cf66201a1e81820519f6bd79ac to < 6e1f586ddec48d71016b81acf68ba9f49ca54db8affected30b4503378c976cf66201a1e81820519f6bd79ac to < d6870f3800dbb212ae8433183ee82f566d067c6caffected30b4503378c976cf66201a1e81820519f6bd79ac to < 2b557fa635e7487f638c0f030c305870839eeda2affected30b4503378c976cf66201a1e81820519f6bd79ac to < 1b9256c96220bcdba287eeeb90e7c910c77f8c46affected30b4503378c976cf66201a1e81820519f6bd79ac to < f011360ad234a07cb6fbcc720fff646a93a9f0d6affected30b4503378c976cf66201a1e81820519f6bd79ac to < b9cee506da2b7920b5ea02ccd8e78a907d0ee7aaaffected
Linux Linux
Default version status: affected
3.1affected0 to < 3.1unaffected4.14.306 to ≤ 4.14.*unaffected4.19.273 to ≤ 4.19.*unaffected5.4.232 to ≤ 5.4.*unaffected5.10.168 to ≤ 5.10.*unaffected5.15.93 to ≤ 5.15.*unaffected6.1.11 to ≤ 6.1.*unaffected6.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/437e50ef6290ac835d526d0e45f466a0aa69ba1b ↗
- https://git.kernel.org/stable/c/6e1f586ddec48d71016b81acf68ba9f49ca54db8 ↗
- https://git.kernel.org/stable/c/d6870f3800dbb212ae8433183ee82f566d067c6c ↗
- https://git.kernel.org/stable/c/2b557fa635e7487f638c0f030c305870839eeda2 ↗
- https://git.kernel.org/stable/c/1b9256c96220bcdba287eeeb90e7c910c77f8c46 ↗
- https://git.kernel.org/stable/c/f011360ad234a07cb6fbcc720fff646a93a9f0d6 ↗
- https://git.kernel.org/stable/c/b9cee506da2b7920b5ea02ccd8e78a907d0ee7aa ↗