CVE-2024-57880: ASoC: Intel: sof_sdw: Add space for a terminator into DAIs array
In the Linux kernel, the following vulnerability has been resolved:
ASoC: Intel: sofsdw: Add space for a terminator into DAIs array
The code uses the initialised member of the asocsdwdailink struct to determine if a member of the array is in use. However in the case the array is completely full this will lead to an access 1 past the end of the array, expand the array by one entry to include a space for a terminator.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-57880?
The severity of CVE-2024-57880 is categorized as moderate.
What affects does CVE-2024-57880 have on the Linux kernel?
CVE-2024-57880 can potentially allow improper handling of DAI arrays, leading to reliability issues.
How do I fix CVE-2024-57880?
To fix CVE-2024-57880, update your Linux kernel to the latest patched version provided by the vendor.
Which versions of the Linux kernel are affected by CVE-2024-57880?
CVE-2024-57880 affects various versions of the Linux kernel that utilize the ASoC Intel driver.
Is CVE-2024-57880 exploitable remotely?
CVE-2024-57880 is not typically considered to be remotely exploitable.