Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2026-74333

ASoC: amd: acp-sdw-legacy: Bound DAI link iteration

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-sdw-legacy: Bound DAI link iteration create_sdw_dailinks() walks soc_dais until it finds an entry with initialised cleared, but soc_dais is allocated with exactly num_ends entries. If all entries are initialised, the loop reads past the end of the array. This was reported by KASAN: BUG: KASAN: slab-out-of-bounds in mc_probe+0x26b3/0x2774 [snd_acp_sdw_legacy_mach] Read of size 1 Pass the allocated entry count to create_sdw_dailinks() and stop before reading past the array.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 2981d9b0789c44b7375e7d599caf71bd843afc9e to < 1279bdab5fa1f28c168e54215db506e87c6fac1eaffected
  • 2981d9b0789c44b7375e7d599caf71bd843afc9e to < 0230471eef5902207516851dcd47c559571dded2affected
  • 2981d9b0789c44b7375e7d599caf71bd843afc9e to < d49ecdf327cc91062d2f80996a163cf65fda1e60affected

Linux Linux

Default version status: affected

  • 6.13affected
  • 0 to < 6.13unaffected
  • 6.18.40 to ≤ 6.18.*unaffected
  • 7.1.5 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References