CyberRota
← Ana sayfaya dön

CVE-2025-71286

MEDIUM · CVSS 5.5 EPSS %0.01

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-05-06T12:16:27.737 · Çekilme zamanı: 2026-06-05T12:00:28.398394+00:00

CyberRota Yorumu

Bellek tüketimine neden olabilir.

CVE
CVE-2025-71286
Severity
MEDIUM
CVSS
5.5
EPSS
%0.01
Linux

Orijinal NVD Açıklaması

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls The size of the data behind of scontrol->ipc_control_data for bytes controls is: [1] sizeof(struct sof_ipc4_control_data) + // kernel only struct [2] sizeof(struct sof_abi_hdr)) + payload The max_size specifies the size of [2] and it is coming from topology. Change the function to take this into account and allocate adequate amount of memory behind scontrol->ipc_control_data. With the change we will allocate [1] amount more memory to be able to hold the full size of data.