CVE-2023-53640: ASoC: lpass: Fix for KASAN use_after_free out of bounds
In the Linux kernel, the following vulnerability has been resolved:
ASoC: lpass: Fix for KASAN useafterfree out of bounds
When we run syzkaller we get below Out of Bounds error.
"KASAN: slab-out-of-bounds Read in regcacheflatread"
Below is the backtrace of the issue:
BUG: KASAN: slab-out-of-bounds in regcacheflatread+0x10c/0x110 Read of size 4 at addr ffffff8088fbf714 by task syz-executor.4/14144 CPU: 6 PID: 14144 Comm: syz-executor.4 Tainted: G W Hardware name: Qualcomm Technologies, Inc. sc7280 CRD platform (rev5+) (DT) Call trace: dumpbacktrace+0x0/0x4ec showstack+0x34/0x50 dumpstacklvl+0xdc/0x11c printaddressdescription+0x30/0x2d8 kasanreport+0x178/0x1e4 asanreportload4noabort+0x44/0x50 regcacheflatread+0x10c/0x110 regcacheread+0xf8/0x5a0 regmapread+0x45c/0x86c regmapupdatebits+0x128/0x290 regmapupdatebitsbase+0xc0/0x15c sndsoccomponentupdatebits+0xa8/0x22c sndsoccomponentwritefield+0x68/0xd4 txmacroputdecenum+0x1d0/0x268 sndctlelemwrite+0x288/0x474
By Error checking and checking valid values issue gets rectifies.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53640?
CVE-2023-53640 has been identified as a high-severity vulnerability in the Linux kernel.
How do I fix CVE-2023-53640?
To fix CVE-2023-53640, update your Linux kernel to the latest stable version that includes the patch for this vulnerability.
What systems are affected by CVE-2023-53640?
CVE-2023-53640 affects various versions of the Linux kernel across different distributions.
What does CVE-2023-53640 exploit?
CVE-2023-53640 exploits a use-after-free vulnerability that can lead to out-of-bounds memory access.
Is there a workaround for CVE-2023-53640?
There are no specific workarounds for CVE-2023-53640; applying the kernel update is the recommended action.