Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix sc7280 lpass potential buffer overflow Case values introduced in commit 5f78e1fb7a3e ("ASoC: qcom: Add driver support for audioreach solution") cause out of bounds access in arrays of sc7280 driver data (e.g. in case of RX_CODEC_DMA_RX_0 in sc7280_snd_hw_params()). Redefine LPASS_MAX_PORTS to consider the maximum possible port id for q6dsp as sc7280 driver utilizes some of those values. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
77d0ffef793da818741127f4905a3e3d45d05ac7 to < d78888853eb53f47ae16cf3aa5d0444d0331b9f8affected77d0ffef793da818741127f4905a3e3d45d05ac7 to < a12c14577882b1f2b4cff0f86265682f16e97b0caffected77d0ffef793da818741127f4905a3e3d45d05ac7 to < c0ce01e0ff8a0d61a7b089ab309cdc12bc527c39affected77d0ffef793da818741127f4905a3e3d45d05ac7 to < b807b7c81a6d066757a94af7b8fa5b6a37e4d0b3affected77d0ffef793da818741127f4905a3e3d45d05ac7 to < a31a4934b31faea76e735bab17e63d02fcd8e029affected
Linux Linux
Default version status: affected
5.18affected0 to < 5.18unaffected6.1.136 to ≤ 6.1.*unaffected6.6.88 to ≤ 6.6.*unaffected6.12.25 to ≤ 6.12.*unaffected6.14.4 to ≤ 6.14.*unaffected6.15 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/d78888853eb53f47ae16cf3aa5d0444d0331b9f8 ↗
- https://git.kernel.org/stable/c/a12c14577882b1f2b4cff0f86265682f16e97b0c ↗
- https://git.kernel.org/stable/c/c0ce01e0ff8a0d61a7b089ab309cdc12bc527c39 ↗
- https://git.kernel.org/stable/c/b807b7c81a6d066757a94af7b8fa5b6a37e4d0b3 ↗
- https://git.kernel.org/stable/c/a31a4934b31faea76e735bab17e63d02fcd8e029 ↗
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html ↗