Buffer Overflow Vulnerability in Linux Kernel Affecting Intel ASoC Drivers

CVE-2024-57880

Summary

A buffer overflow vulnerability exists in the Intel ASoC drivers within the Linux kernel. This issue arises due to improper handling of the DAIs array, leading to potential out-of-bounds access. Specifically, the code incorrectly assumes there is always an available slot in the array when assessing usage, resulting in an attempt to access a memory location past the allocated array bounds when the array is full. The fix involves expanding the array to include a terminator, preventing the possibility of accessing invalid memory and enhancing overall system integrity.

References