Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Refactor and fix init_config access Existing code accesses enties found in ->init_configs array through indexes that are part of ->config_ids array. Those two are limited by: ->num_init_configs and ->num_config_ids respectively. Using ID larger or equal to ->num_init_configs leads to out-of-bounds access: avs_path_module_send_init_configs() loop: (...) &acomp->tplg->init_configs[ids[i]] ^ out-of-bounds candidate Rather than adding another if-statement, refactor the code. There is no need to store the IDs, have a list of pointers to actual config-entries instead. As the verification of ->init_config entries does not differ from verification of other types that are part of the topology.c file, simply reuse the code.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
8a49ef789b1be68242624d460df2ada8087308a7 to < 70ffcaf86a053be99daaf3b103beac0ad7136ca3affected8a49ef789b1be68242624d460df2ada8087308a7 to < 75bd5ea9c858d89fb8862f23afb00783bf02cd7aaffected8a49ef789b1be68242624d460df2ada8087308a7 to < 8f20a0f4f7d638e83ae86db1719a24c7049762f5affected8a49ef789b1be68242624d460df2ada8087308a7 to < 681e91035dc794896a904852040837190e5041f5affected
Linux Linux
Default version status: affected
6.9affected0 to < 6.9unaffected6.12.114 to ≤ 6.12.*unaffected6.18.53 to ≤ 6.18.*unaffected7.2.7 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected