Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-53465

soundwire: qcom: fix storing port config out-of-bounds

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: soundwire: qcom: fix storing port config out-of-bounds The 'qcom_swrm_ctrl->pconfig' has size of QCOM_SDW_MAX_PORTS (14), however we index it starting from 1, not 0, to match real port numbers. This can lead to writing port config past 'pconfig' bounds and overwriting next member of 'qcom_swrm_ctrl' struct. Reported also by smatch: drivers/soundwire/qcom.c:1269 qcom_swrm_get_port_config() error: buffer overflow 'ctrl->pconfig' 14 <= 14

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 9916c02ccd74e672b62dd1a9017ac2f237ebf512 to < 20f7c4d51c94abb1a1a7c21900db4fb5afe5c8ffaffected
  • 9916c02ccd74e672b62dd1a9017ac2f237ebf512 to < 801daff0078087b5df9145c9f5e643c28129734baffected
  • 9916c02ccd74e672b62dd1a9017ac2f237ebf512 to < 32eb67d7360d48c15883e0d21b29c0aab9da022eaffected
  • 9916c02ccd74e672b62dd1a9017ac2f237ebf512 to < 490937d479abe5f6584e69b96df066bc87be92e9affected

Linux Linux

Default version status: affected

  • 5.13affected
  • 0 to < 5.13unaffected
  • 5.15.121 to ≤ 5.15.*unaffected
  • 6.1.40 to ≤ 6.1.*unaffected
  • 6.4.5 to ≤ 6.4.*unaffected
  • 6.5 to ≤ *unaffected

References