Lucene search
K

34 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.2 views

Astra Linux - уязвимость в linux-5.10

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: Prevent a jump to NULL for the addsidecar callback. In the createsdwdailink function, it is checked that sofend-codecinfo-addsidecar is not NULL before calling it. The original code assumed that if...

5.8AI score0.00078EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2026/02/02 9:30 a.m.1 views

kernel: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping

A flaw was found in the Linux kernel’s ASoC Intel bytcrrt5640 driver. When an invalid value is passed via the driver’s “quirk” input option, the driver merely logs an error and retains the invalid value, rather than correcting it. This can result in out-of-bounds OOB memory access...

5.8AI score0.00058EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2026/01/26 12:0 a.m.4 views

RHEL 8 : kernel-rt (RHSA-2026:1148)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1148 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

7.8CVSS7.4AI score0.00088EPSS
Exploits0References10
OSV
OSV
added 2025/11/12 10:23 a.m.1 views

CVE-2025-40121 ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcrrt5651: Fix invalid quirk input mapping When an invalid value is passed via quirk option, currently bytcrrt5640 driver just ignores and leaves as is, which may lead to unepxected results like OOB access. This...

6.2AI score0.00058EPSS
Exploits0References11
Cvelist
Cvelist
added 2025/09/15 2:49 p.m.4 views

CVE-2022-50325 ASoC: Intel: avs: Fix potential RX buffer overflow

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix potential RX buffer overflow If an event caused firmware to return invalid RX size for LARGECONFIGGET, memcpyfromio could end up copying too many bytes. Fix by utilizing mint...

0.00017EPSS
Exploits0References3
OSV
OSV
added 2025/09/15 2:49 p.m.2 views

CVE-2022-50325 ASoC: Intel: avs: Fix potential RX buffer overflow

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix potential RX buffer overflow If an event caused firmware to return invalid RX size for LARGECONFIGGET, memcpyfromio could end up copying too many bytes. Fix by utilizing mint...

7.8CVSS6.7AI score0.00017EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2025/07/25 3:27 p.m.4 views

CVE-2025-38438

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Use devmkstrdup to avoid memleak. sofpdata-tplgfilename can have address allocated by kstrdup and can be overwritten. Memory leak was detected with kmemleak: unreferenced object 0xffff88812391ff60 size 16:...

5.5CVSS5.4AI score0.00049EPSS
Exploits0
OSV
OSV
added 2025/07/10 8:15 a.m.1 views

DEBIAN-CVE-2025-38307

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Verify content returned by parseintarray The first element of the returned array stores its length. If it is 0, any manipulation beyond the element at index 0 ends with null-ptr-deref...

5.5CVSS5.4AI score0.00065EPSS
Exploits0References1
NVD
NVD
added 2025/07/10 8:15 a.m.3 views

CVE-2025-38307

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Verify content returned by parseintarray The first element of the returned array stores its length. If it is 0, any manipulation beyond the element at index 0 ends with null-ptr-deref...

5.5CVSS0.00065EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/07/10 7:42 a.m.4 views

CVE-2025-38307 ASoC: Intel: avs: Verify content returned by parse_int_array()

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Verify content returned by parseintarray The first element of the returned array stores its length. If it is 0, any manipulation beyond the element at index 0 ends with null-ptr-deref...

0.00065EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/06/21 1:14 p.m.2 views

CVE-2025-38056

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Fix UAF when reloading module hdagenericmachineselect appends -idisp to the tplg filename by allocating a new string with devmkasprintf, then stores the string right back into the global variable...

7CVSS7.2AI score0.00052EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/06/20 9:49 a.m.2 views

CVE-2022-50050

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf snprintf returns the would-be-filled size when the string overflows the given buffer size, hence using this value may result in the buffer overflow although it's...

7CVSS7.8AI score0.00052EPSS
Exploits0References4
OSV
OSV
added 2025/06/18 11:1 a.m.2 views

CVE-2022-50050 ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf()

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf snprintf returns the would-be-filled size when the string overflows the given buffer size, hence using this value may result in the buffer overflow although it's...

7.8CVSS6.4AI score0.00052EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2025/06/18 11:1 a.m.5 views

CVE-2022-50015

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot It is not yet clear, but it is possible to create a firmware so broken that it will send a reply message before a FWREADY message it is not yet clear if...

5.5CVSS5.3AI score0.00074EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/06/18 12:0 a.m.4 views

PT-2025-25978 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential buffer overflow issue has been identified in the Linux kernel, specifically in the ASoC: Intel: avs component. The issue arises from the use of snprintf, which returns the...

7.8CVSS6.1AI score0.0282EPSS
Exploits16References558
Positive Technologies
Positive Technologies
added 2025/05/30 12:0 a.m.1 views

PT-2025-29027

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel related to the ASoC Advanced Linux Sound Architecture Intel audio subsystem. Specifically, the parse int array function does not adequately validate t...

5.5CVSS6.5AI score0.00065EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2024-58012

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params Each cpu DAI should associate with a widget. However, the topology might not create the righ...

5.5CVSS6.8AI score0.00009EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2024-50011

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: soc-acpi-intel-rpl-match: add missing empty item There is no linksnum in struct...

5.5CVSS5.8AI score0.00033EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2025/02/26 2:23 a.m.9 views

CVE-2022-49617

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: handle errors on card registration If the card registration fails, typically because of deferred probes, the device properties added for headset codecs are not removed, which leads to kernel oopses in driver...

5.5CVSS5.5AI score0.00071EPSS
Exploits0
Cvelist
Cvelist
added 2025/02/26 1:56 a.m.12 views

CVE-2022-49268 ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: Fix NULL ptr dereference when ENOMEM Do not call snddmafreepages when snddmaallocpages returns -ENOMEM because it leads to a NULL pointer dereference bug. The dmesg says: T1387 sof-audio-pci-intel-tgl...

0.00018EPSS
Exploits0References6
Rows per page
Query Builder