Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2026-74332

ASoC: amd: acp-sdw-sof: Bound DAI link iteration

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-sdw-sof: Bound DAI link iteration create_sdw_dailinks() walks sof_dais until it finds an entry with initialised cleared, but sof_dais is allocated with exactly num_ends entries. If all entries are initialised, the loop reads past the end of the array. Pass the allocated entry count to create_sdw_dailinks() and stop before reading past the array.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6d8348ddc56ed43ba39d1e8adda13299201f32ed to < 0a5ff4000dd7a390139dd7823fef1de4963e490aaffected
  • 6d8348ddc56ed43ba39d1e8adda13299201f32ed to < 9e82497138abea7d5c6e65015663d907fbcbf6b4affected
  • 6d8348ddc56ed43ba39d1e8adda13299201f32ed to < 86a64c049873fe4d4a6a378e27a333ab5631c4b2affected
  • 6d8348ddc56ed43ba39d1e8adda13299201f32ed to < 4d992e63f52d58f52b724606c60ae7b37a1c582faffected

Linux Linux

Default version status: affected

  • 6.12affected
  • 0 to < 6.12unaffected
  • 6.12.97 to ≤ 6.12.*unaffected
  • 6.18.40 to ≤ 6.18.*unaffected
  • 7.1.5 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References