7.8

CVE-2026-72488

soundwire: fix bug in sdw_add_element_group_count found by syzkaller

In the Linux kernel, the following vulnerability has been resolved:

soundwire: fix bug in sdw_add_element_group_count found by syzkaller

The original implementation caused an out-of-bounds memory access
in the sdw_add_element_group_count for-loop when i == num.

for (i = 0; i <= num; i++) {
    if (rate == group->rates[i] && lane == group->lanes[i])
        ...

To fix this error, the function now checks for existing rate/lane
entries in the group(a function parameter) using a for-loop before
adding them.

No functional changes apart from this fix.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 9026118f20e28f202dab34f219bbb831ffb8c4dc
Version < a454f61747c97e2eadaa7a35ffc1f4b1645c6a53
Status affected
Version 9026118f20e28f202dab34f219bbb831ffb8c4dc
Version < e483a406a23a92d5202e8d324f206e127eef48ff
Status affected
Version 9026118f20e28f202dab34f219bbb831ffb8c4dc
Version < f772ff5a0e6758fd412803c09e03ba3bca5f5878
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.10
Status affected
Version 0
Version < 5.10
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.059
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/a454f61747c97e2eadaa7a35ffc1f4b1645c6a53
https://git.kernel.org/stable/c/e483a406a23a92d5202e8d324f206e127eef48ff
https://git.kernel.org/stable/c/f772ff5a0e6758fd412803c09e03ba3bca5f5878