Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: tas2562: Validate values for volume writes tas2562_volume_control_put() does not do any validation of the control value written by userspace, it uses it to look up a value in a fixed size array which can easily be overflowed and then writes whatever value it gets back to the device. Add validation that we are loading a value we have in the array.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
bf726b1c86f2caab70ad614cdf7da3b81ad08e69 to < 602b209a5cfcf8e891afba12fad109db4141d4b8affectedbf726b1c86f2caab70ad614cdf7da3b81ad08e69 to < 1f389ecd0c35e9e281036e44c121df904f3164c1affectedbf726b1c86f2caab70ad614cdf7da3b81ad08e69 to < 20bdbb1376457ecbf418bf677fd285820d1fc011affectedbf726b1c86f2caab70ad614cdf7da3b81ad08e69 to < db488d653d896fcf9ac87e15239924c2928bbc3caffectedbf726b1c86f2caab70ad614cdf7da3b81ad08e69 to < c37a0461c0d0a70c5de4fdbd70449a7f53c12ddaaffectedbf726b1c86f2caab70ad614cdf7da3b81ad08e69 to < 8fb41964f7e4e4207c8999af2056894caa7a252aaffected
Linux Linux
Default version status: affected
5.7affected0 to < 5.7unaffected6.1.191 to ≤ 6.1.*unaffected6.6.153 to ≤ 6.6.*unaffected6.12.105 to ≤ 6.12.*unaffected6.18.46 to ≤ 6.18.*unaffected7.1.10 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/602b209a5cfcf8e891afba12fad109db4141d4b8 ↗
- https://git.kernel.org/stable/c/1f389ecd0c35e9e281036e44c121df904f3164c1 ↗
- https://git.kernel.org/stable/c/20bdbb1376457ecbf418bf677fd285820d1fc011 ↗
- https://git.kernel.org/stable/c/db488d653d896fcf9ac87e15239924c2928bbc3c ↗
- https://git.kernel.org/stable/c/c37a0461c0d0a70c5de4fdbd70449a7f53c12dda ↗
- https://git.kernel.org/stable/c/8fb41964f7e4e4207c8999af2056894caa7a252a ↗