Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access ASIHPI driver stores some values in the static array upon a response from the driver, and its index depends on the firmware. We shouldn't trust it blindly. This patch adds a sanity check of the array index to fit in the array size.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
719f82d3987aad4cc9f46d19c35f362672545cad to < a6bdb691cf7b66dcd929de1a253c5c42edd2e522affected719f82d3987aad4cc9f46d19c35f362672545cad to < ce2953e44829ec54bcbb57e9d890fc8af0900c80affected719f82d3987aad4cc9f46d19c35f362672545cad to < 219587bca2678e31700ef09ecec178ba1f735674affected719f82d3987aad4cc9f46d19c35f362672545cad to < 36ee4021bcc37b834996e79740d095d6f8dd948faffected719f82d3987aad4cc9f46d19c35f362672545cad to < e658227d9d4f4e122d81690fdbc0d438b10288f5affected719f82d3987aad4cc9f46d19c35f362672545cad to < 7a55740996701f7b2bc46dc988b60ef2e416a747affected719f82d3987aad4cc9f46d19c35f362672545cad to < ad7248a5e92587b9266c62db8bcc4e58de53e372affected719f82d3987aad4cc9f46d19c35f362672545cad to < 876d04bf5a8ac1d6af5afd258cd37ab83ab2cf3daffected719f82d3987aad4cc9f46d19c35f362672545cad to < 7b986c7430a6bb68d523dac7bfc74cbd5b44ef96affected
Linux Linux
Default version status: affected
2.6.35affected0 to < 2.6.35unaffected4.19.323 to ≤ 4.19.*unaffected5.4.285 to ≤ 5.4.*unaffected5.10.227 to ≤ 5.10.*unaffected5.15.168 to ≤ 5.15.*unaffected6.1.113 to ≤ 6.1.*unaffected6.6.55 to ≤ 6.6.*unaffected6.10.14 to ≤ 6.10.*unaffected6.11.3 to ≤ 6.11.*unaffected6.12 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/a6bdb691cf7b66dcd929de1a253c5c42edd2e522 ↗
- https://git.kernel.org/stable/c/ce2953e44829ec54bcbb57e9d890fc8af0900c80 ↗
- https://git.kernel.org/stable/c/219587bca2678e31700ef09ecec178ba1f735674 ↗
- https://git.kernel.org/stable/c/36ee4021bcc37b834996e79740d095d6f8dd948f ↗
- https://git.kernel.org/stable/c/e658227d9d4f4e122d81690fdbc0d438b10288f5 ↗
- https://git.kernel.org/stable/c/7a55740996701f7b2bc46dc988b60ef2e416a747 ↗
- https://git.kernel.org/stable/c/ad7248a5e92587b9266c62db8bcc4e58de53e372 ↗
- https://git.kernel.org/stable/c/876d04bf5a8ac1d6af5afd258cd37ab83ab2cf3d ↗
- https://git.kernel.org/stable/c/7b986c7430a6bb68d523dac7bfc74cbd5b44ef96 ↗
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗