Lucene search

K
redhatcveRedhat.comRH:CVE-2024-26927
HistoryApr 29, 2024 - 4:38 p.m.

CVE-2024-26927

2024-04-2916:38:51
redhat.com
access.redhat.com
6
linux kernel
asoc
firmware
bounds checking
vulnerability

7.3 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.1%

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Add some bounds checking to firmware data Smatch complains about “head->full_size - head->header_size” can underflow. To some extent, we’re always going to have to trust the firmware a bit. However, it’s easy enough to add a check for negatives, and let’s add a upper bounds check as well.

7.3 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.1%

Related for RH:CVE-2024-26927