What happened
In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: bug fix while parsing mipi-sdca-control-cn-list "struct sdca_control" declares "values" field as integer array. But the memory allocated to it is of char array. This causes crash for sdca_parse_function API. This patch addresses the issue by allocating correct data size.
Affected versions
Linux: 50a479527ef01f9b36dde1803a7e81741a222509 through before fcd5786b506c51cbabc2560c68e040d8dba22a0d (git); 50a479527ef01f9b36dde1803a7e81741a222509 through before eb2d6774cc0d9d6ab8f924825695a85c14b2e0c2 (git); 6.17 Fixed: See vendor advisory.
Why it matters
Review the vendor advisory and exposure of the affected product to determine operational impact.
Detection & mitigation
- Apply vendor-provided updates or mitigations.
- Review affected product exposure and access logs.
Public PoC references
No public PoC reference has passed the current publication threshold.