In the Linux kernel, the following vulnerability has been resolved:
ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses
EAR SPKR PA Gain" and the four "WSA RX* Mux" controls are enumerated,
but their get and put callbacks access the value through
ucontrol->value.integer.value[0] (a long) instead of
ucontrol->value.enumerated.item[0] (an unsigned int).
This same pattern was fixed in the sibling drivers by
commit bcfe5f76cc40 ("ASoC: codecs: rx-macro: fix accessing array
out of bounds for enum type") and
commit 0ea5eff7c606 ("ASoC: codecs: va-macro: fix accessing array
out of bounds for enum type"), but wsa-macro was missed.
On 64-bit kernels with CONFIG_SND_CTL_DEBUG this trips the elem value
sanity check and every read of these controls fails with -EINVAL.
from 809bcbcecebff86003e13f07444d21b9d6652a64 before bd4e5f9c3b764dc0e2a5662f92d63d2f3767a78d; 809bcbcecebff86003e13f07444d21b9d6652a64 builds before 4bcac4bf304a3ec746192e49a669c236aaf27dbf; from 809bcbcecebff86003e13f07444d21b9d6652a64 before 891129df5de79cd533ae335c6eab24df2ff2b0fd; 809bcbcecebff86003e13f07444d21b9d6652a64 builds before 524aa7b9954b0a43dd13f71ecbbac52a151c326d; 809bcbcecebff86003e13f07444d21b9d6652a64 builds before 2fe7a89b2b5b73be35c1e493d0246314ba54e427; 809bcbcecebff86003e13f07444d21b9d6652a64 builds before 7bcdde412e6c744f6135e02b12a735e2e37b639f; 809bcbcecebff86003e13f07444d21b9d6652a64 builds before 56f24311fd5607588a47e44675195a9efb200f29
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.
Printed from infosecsignals.com. Every record links back to the agency that published it.
Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.
