Memory Allocation Flaw in Linux Kernel Affects SOF IPC4 Topology

CVE-2025-71286

What is CVE-2025-71286?

A memory allocation vulnerability has been identified in the Linux kernel, specifically impacting the SOF IPC4 topology. The issue arises from an incorrect calculation of the memory size allocated for byte controls within the scontrol->ipc_control_data structure. The problem stems from the max_size parameter, which only accounts for part of the required memory. As a result, the kernel may fail to allocate sufficient space, leading to potential data handling problems. The kernel has been updated to ensure that the necessary amount of memory is allocated, thus enhancing the robustness of the IPC4 control data handling.

References