CVE-2023-54245: ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds
In the Linux kernel, the following vulnerability has been resolved:
ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds
When we run syzkaller we get below Out of Bound. "KASAN: slab-out-of-bounds Read in regcacheflatread"
Below is the backtrace of the issue:
dumpbacktrace+0x0/0x4c8 showstack+0x34/0x44 dumpstacklvl+0xd8/0x118 printaddressdescription+0x30/0x2d8 kasanreport+0x158/0x198 asanreportload4noabort+0x44/0x50 regcacheflatread+0x10c/0x110 regcacheread+0xf4/0x180 regmapread+0xc4/0x278 regmapupdatebits+0x130/0x290 regmapupdatebitsbase+0xc0/0x15c sndsoccomponentupdatebits+0xa8/0x22c sndsoccomponentwritefield+0x68/0xd4 txmacrodigitalmute+0xec/0x140
Actually There is no need to have decimator with 32 bits. By limiting the variable with short type u8 issue is resolved.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-54245?
CVE-2023-54245 has been classified with a medium severity due to potential out-of-bounds read issues.
How do I fix CVE-2023-54245?
To fix CVE-2023-54245, update your Linux kernel to the latest version that includes the security patch.
What impact does CVE-2023-54245 have on affected systems?
CVE-2023-54245 can potentially lead to information disclosure or instability in the affected systems.
What versions of Linux are affected by CVE-2023-54245?
CVE-2023-54245 affects specific versions of the Linux kernel, particularly those that include the codec subsystem functionalities.
Is CVE-2023-54245 actively exploited in the wild?
As of now, there is no evidence to suggest that CVE-2023-54245 is actively exploited in the wild.