CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's ASoC SOF IPC control, where insufficient validation of the size of firmware-provided data can lead to buffer overflows during memory copy operations. This flaw could allow an attacker to exploit the system by writing beyond allocated memory, potentially leading to arbitrary code execution or system crashes. Organizations using affected Linux kernel versions should prioritize patching this vulnerability to mitigate the risk of exploitation.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control In snd_sof_update_control(), firmware-provided cdata->num_elems is checked against local_cdata->data->size but never against the actual allocation size. If local_cdata->data->size was previously set to an inconsistent value, the memcpy could write past the allocated buffer. Add a bounds check to ensure num_elems fits within the available space in the ipc_control_data allocation before copying.