CVE-2022-49518: Out-of-bounds Read

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-topology: Correct getcontroldata for non bytes payload It is possible to craft a topology where sofgetcontroldata would do out of bounds access because it expects that it is only called when the payload is bytes...

sound-open-firmware:sof-ipc3: Crash in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5904359311867904 Project: sound-open-firmware Fuzzing Engine: libFuzzer Fuzz Target: sof-ipc3 Job Type: libfuzzerasani386sound-open-firmware Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00002fe6 Crash State: pthreadcreate...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the sofipc3fwparseextman function in the sound/soc/sof/ipc3-loader.c file of the Linux kernel is related to reading beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to cause a service failure...

sound-open-firmware:sof-ipc3: Crash in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=6693063771422720 Project: sound-open-firmware Fuzzing Engine: libFuzzer Fuzz Target: sof-ipc3 Job Type: libfuzzerasani386sound-open-firmware Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x07020505 Crash State: pthreadcreate...

kernel: ASoC: SOF: ipc3-topology: Prevent double freeing of ipc_control_data via load_bytes

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-topology: Prevent double freeing of ipccontroldata via loadbytes We have sanity checks for byte controls and if any of the fail the locally allocated scontrol-ipccontroldata is freed up, but not set to NULL. On a...

GSD-2022-1005217 ASoC: SOF: ipc3-topology: Prevent double freeing of ipc_control_data via load_bytes

ASoC: SOF: ipc3-topology: Prevent double freeing of ipccontroldata via loadbytes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by comm...

GSD-2022-1002809 ASoC: SOF: ipc3-topology: Set scontrol->priv to NULL after freeing it

ASoC: SOF: ipc3-topology: Set scontrol-priv to NULL after freeing it This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

PT-2022-31080

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description A potential issue exists in the ASoC: SOF: ipc3-topology component, specifically with the get control data function when handling non-bytes payload. The actual impact and attack plausibility...

PT-2025-8451

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read issue exists in the sof get control data function within the sound/soc/sof/ipc3-topology.c module of the Linux kernel SoC sound support. The issue occurs because th...