Bug 2327353 (CVE-2024-53045) - CVE-2024-53045 kernel: ASoC: dapm: fix bounds checker error in dapm_widget_list_create
Summary: CVE-2024-53045 kernel: ASoC: dapm: fix bounds checker error in dapm_widget_li...
Keywords:
Status: NEW
Alias: CVE-2024-53045
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2327469
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-11-19 18:02 UTC by OSIDB Bzimport
Modified: 2024-11-21 19:08 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2024-11-19 18:02:36 UTC
In the Linux kernel, the following vulnerability has been resolved:

ASoC: dapm: fix bounds checker error in dapm_widget_list_create

The widgets array in the snd_soc_dapm_widget_list has a __counted_by
attribute attached to it, which points to the num_widgets variable. This
attribute is used in bounds checking, and if it is not set before the
array is filled, then the bounds sanitizer will issue a warning or a
kernel panic if CONFIG_UBSAN_TRAP is set.

This patch sets the size of the widgets list calculated with
list_for_each as the initial value for num_widgets as it is used for
allocating memory for the array. It is updated with the actual number of
added elements after the array is filled.


Note You need to log in before you can comment on or make changes to this bug.