Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] component_dais[RSND_MAX_COMPONENT] is initially zero-initialized and later populated in rsnd_dai_of_node(). However, the existing boundary check: if (i >= RSND_MAX_COMPONENT) does not guarantee that the last valid element remains zero. As a result, the loop can rely on component_dais[RSND_MAX_COMPONENT] being zero, which may lead to an out-of-bounds access. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
547b02f74e4ac1e7d295a6266d5bc93a647cd4ac to < 9f1daac27ca28e98c8c0e4450de42bb68d547250affected547b02f74e4ac1e7d295a6266d5bc93a647cd4ac to < 15e7b2ac2455995a6af02b9d3da7a432837aaf72affected547b02f74e4ac1e7d295a6266d5bc93a647cd4ac to < 134c61925e9e9ee0f4fdbab5c3984d5bb024f5f5affected547b02f74e4ac1e7d295a6266d5bc93a647cd4ac to < a62b3e6e42359a79158c134e3cf5c74fe160c3f5affected547b02f74e4ac1e7d295a6266d5bc93a647cd4ac to < f9e437cddf6cf9e603bdaefe148c1f4792aaf39caffected
Linux Linux
Default version status: affected
6.6affected0 to < 6.6unaffected6.6.141 to ≤ 6.6.*unaffected6.12.91 to ≤ 6.12.*unaffected6.18.33 to ≤ 6.18.*unaffected7.0.10 to ≤ 7.0.*unaffected7.1 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/9f1daac27ca28e98c8c0e4450de42bb68d547250 ↗
- https://git.kernel.org/stable/c/15e7b2ac2455995a6af02b9d3da7a432837aaf72 ↗
- https://git.kernel.org/stable/c/134c61925e9e9ee0f4fdbab5c3984d5bb024f5f5 ↗
- https://git.kernel.org/stable/c/a62b3e6e42359a79158c134e3cf5c74fe160c3f5 ↗
- https://git.kernel.org/stable/c/f9e437cddf6cf9e603bdaefe148c1f4792aaf39c ↗