Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: dapm: fix bounds checker error in dapm_widget_list_create The widgets array in the snd_soc_dapm_widget_list has a __counted_by attribute attached to it, which points to the num_widgets variable. This attribute is used in bounds checking, and if it is not set before the array is filled, then the bounds sanitizer will issue a warning or a kernel panic if CONFIG_UBSAN_TRAP is set. This patch sets the size of the widgets list calculated with list_for_each as the initial value for num_widgets as it is used for allocating memory for the array. It is updated with the actual number of added elements after the array is filled.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 6.7, < 6.11.7 |
References
- https://git.kernel.org/stable/c/2ef9439f7a19fd3d43b288d38b1c6e55b668a4fePatch
- https://git.kernel.org/stable/c/c549cb66e8de0ba1936fc97a59f0156741d3492aPatch
FAQ
What is CVE-2024-53045?
CVE-2024-53045 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: ASoC: dapm: fix bounds checker error in dapm_widget_list_create The widgets array in the snd_soc_dapm_widget_list has a __counted_...
How severe is CVE-2024-53045?
CVE-2024-53045 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-53045?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.