Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() tuning_ctl_set() might have buffer overrun at (X) if it didn't break from loop by matching (A). static int tuning_ctl_set(...) { for (i = 0; i < TUNING_CTLS_COUNT; i++) (A) if (nid == ca0132_tuning_ctls[i].nid) break; snd_hda_power_up(...); (X) dspio_set_param(..., ca0132_tuning_ctls[i].mid, ...); snd_hda_power_down(...); ^ return 1; } We will get below error by cppcheck sound/pci/hda/patch_ca0132.c:4229:2: note: After for loop, i has value 12 for (i = 0; i < TUNING_CTLS_COUNT; i++) ^ sound/pci/hda/patch_ca0132.c:4234:43: note: Array index out of bounds dspio_set_param(codec, ca0132_tuning_ctls[i].mid, 0x20, ^ This patch cares non match case.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
44f0c9782cc6ab71ea947f8f710a46f2078a151c to < ff5e8b49348f6a550c136b74efaf8b3c1d3ceaeaaffected44f0c9782cc6ab71ea947f8f710a46f2078a151c to < 3590498117a11aa1f92a97e8a04d95320e347ebdaffected44f0c9782cc6ab71ea947f8f710a46f2078a151c to < 7f12f99b8017ad5ed5aff4b0aefe3bb7bbdf8a99affected44f0c9782cc6ab71ea947f8f710a46f2078a151c to < baef27176ea5fdc7ad0947e2dc7733855e35db71affected44f0c9782cc6ab71ea947f8f710a46f2078a151c to < d23f65f08247068576a01e28b297e995b7dc3965affected44f0c9782cc6ab71ea947f8f710a46f2078a151c to < 32854bc91ae7debcdefdc7ae881ed83385a04792affected44f0c9782cc6ab71ea947f8f710a46f2078a151c to < 734a3deb6614e3597e7e9ef7fb6006c593c5ee18affected44f0c9782cc6ab71ea947f8f710a46f2078a151c to < 98e5eb110095ec77cb6d775051d181edbf9cd3cfaffected
Linux Linux
Default version status: affected
3.9affected0 to < 3.9unaffected4.14.312 to ≤ 4.14.*unaffected4.19.280 to ≤ 4.19.*unaffected5.4.240 to ≤ 5.4.*unaffected5.10.177 to ≤ 5.10.*unaffected5.15.106 to ≤ 5.15.*unaffected6.1.23 to ≤ 6.1.*unaffected6.2.10 to ≤ 6.2.*unaffected6.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/ff5e8b49348f6a550c136b74efaf8b3c1d3ceaea ↗
- https://git.kernel.org/stable/c/3590498117a11aa1f92a97e8a04d95320e347ebd ↗
- https://git.kernel.org/stable/c/7f12f99b8017ad5ed5aff4b0aefe3bb7bbdf8a99 ↗
- https://git.kernel.org/stable/c/baef27176ea5fdc7ad0947e2dc7733855e35db71 ↗
- https://git.kernel.org/stable/c/d23f65f08247068576a01e28b297e995b7dc3965 ↗
- https://git.kernel.org/stable/c/32854bc91ae7debcdefdc7ae881ed83385a04792 ↗
- https://git.kernel.org/stable/c/734a3deb6614e3597e7e9ef7fb6006c593c5ee18 ↗
- https://git.kernel.org/stable/c/98e5eb110095ec77cb6d775051d181edbf9cd3cf ↗