Lucene search

K
cveMITRECVE-2024-26927
HistoryApr 28, 2024 - 11:27 a.m.

CVE-2024-26927

2024-04-2811:27:56
MITRE
web.nvd.nist.gov
22
linux kernel
asoc
firmware vulnerability

7.5 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.5%

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: Add some bounds checking to firmware data

Smatch complains about “head->full_size - head->header_size” can
underflow. To some extent, we’re always going to have to trust the
firmware a bit. However, it’s easy enough to add a check for negatives,
and let’s add a upper bounds check as well.

VendorProductVersionCPE
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linuxlinux_kernel*cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

7.5 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.5%

Related for CVE-2024-26927