CVE-2024-26927 — ASoC: SOF: Add some bounds checking to firmware data
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Add some bounds checking to firmware data Smatch complains about "head->full_size - head->header…
Published: 2024-04-28 · CVSS: 8.4 · CVSS 3.1
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Add some bounds checking to firmware data Smatch complains about "head->full_size - head->header_size" can underflow. To some extent, we're always going to have to trust the firmware a bit. However, it's easy enough to add a check for negatives, and let's add a upper bounds check as well.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7