CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's ASoC (ALSA System on Chip) subsystem, specifically in the fsl_audmix driver, where improper validation of user-provided enum values can lead to out-of-bounds access. This flaw could potentially allow an attacker to exploit the system by manipulating audio source configurations, leading to undefined behavior or system instability. Organizations using affected Linux kernel versions, particularly those relying on the fsl_audmix driver for audio processing, should prioritize patching to mitigate potential risks.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: fsl: fsl_audmix: Validate written enum values fsl_audmix_put_mix_clk_src() and fsl_audmix_put_out_src() convert the user-provided enum item with snd_soc_enum_item_to_val() before checking whether the item is within the enum's item count. The generic snd_soc_put_enum_double() helper performs that validation, but these callbacks use the converted value first: the clock-source path tests it with BIT(), and the output-source path indexes the prms transition table with it. Reject out-of-range enum items before converting them.