CVE-2023-53788
Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() tuning_ctl_set() might have buffer overrun at (X) if it didn't break from loop by matching (A). static int tuning_ctl_set(...) { for (i = 0; i < TUNING_CTLS_COUNT; i++) (A) if (nid == ca0132_tuning_ctls[i].nid) break; snd_hda_power_up(...); (X) dspio_set_param(..., ca0132_tuning_ctls[i].mid, ...); snd_hda_power_down(...); ^ return 1; } We will get below error by cppcheck sound/pci/hda/patch_ca0132.c:4229:2: note: After for loop, i has value 12 for (i = 0; i < TUNING_CTLS_COUNT; i++) ^ sound/pci/hda/patch_ca0132.c:4234:43: note: Array index out of bounds dspio_set_param(codec, ca0132_tuning_ctls[i].mid, 0x20, ^ This patch cares non match case.
How to fix
- Linux Linuxff5e8b49348f6a550c136b74efaf8b3c1d3ceaea, 3590498117a11aa1f92a97e8a04d95320e347ebd, 7f12f99b8017ad5ed5aff4b0aefe3bb7bbdf8a99, baef27176ea5fdc7ad0947e2dc7733855e35db71, d23f65f08247068576a01e28b297e995b7dc3965, 32854bc91ae7debcdefdc7ae881ed83385a04792, 734a3deb6614e3597e7e9ef7fb6006c593c5ee18, 98e5eb110095ec77cb6d775051d181edbf9cd3cf or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 44f0c9782cc6ab71ea947f8f710a46f2078a151c ≤ v < ff5e8b49348f6a550c136b74efaf8b3c1d3ceaea, 44f0c9782cc6ab71ea947f8f710a46f2078a151c ≤ v < 3590498117a11aa1f92a97e8a04d95320e347ebd, 44f0c9782cc6ab71ea947f8f710a46f2078a151c ≤ v < 7f12f99b8017ad5ed5aff4b0aefe3bb7bbdf8a99, 44f0c9782cc6ab71ea947f8f710a46f2078a151c ≤ v < baef27176ea5fdc7ad0947e2dc7733855e35db71, 44f0c9782cc6ab71ea947f8f710a46f2078a151c ≤ v < d23f65f08247068576a01e28b297e995b7dc3965, 44f0c9782cc6ab71ea947f8f710a46f2078a151c ≤ v < 32854bc91ae7debcdefdc7ae881ed83385a04792, 44f0c9782cc6ab71ea947f8f710a46f2078a151c ≤ v < 734a3deb6614e3597e7e9ef7fb6006c593c5ee18, 44f0c9782cc6ab71ea947f8f710a46f2078a151c ≤ v < 98e5eb110095ec77cb6d775051d181edbf9cd3cf, 3.9 | ff5e8b49348f6a550c136b74efaf8b3c1d3ceaea, 3590498117a11aa1f92a97e8a04d95320e347ebd, 7f12f99b8017ad5ed5aff4b0aefe3bb7bbdf8a99, baef27176ea5fdc7ad0947e2dc7733855e35db71, d23f65f08247068576a01e28b297e995b7dc3965, 32854bc91ae7debcdefdc7ae881ed83385a04792, 734a3deb6614e3597e7e9ef7fb6006c593c5ee18, 98e5eb110095ec77cb6d775051d181edbf9cd3cf |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.