Lucene search
+L

39 matches found

SUSE CVE
SUSE CVE
added 2026/05/09 2:48 a.m.24 views

SUSE CVE-2025-71286

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls The size of the data behind of scontrol-ipccontroldata for bytes controls is: 1 sizeofstruct sofipc4controldata + // kernel only struct 2 sizeofstruct...

5.5CVSS5.8AI score0.00138EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/05/06 4:56 p.m.11 views

CVE-2025-71286

A flaw was found in the Linux kernel, specifically within the Advanced Linux Sound Architecture ALSA Sound Open Firmware SOF ipc4-topology component. An incorrect calculation of memory allocation size for bytes controls can occur. This memory allocation error could lead to memory corruption,...

7.8CVSS5.8AI score0.00138EPSS
SaveExploits0References4
NVD
NVD
added 2026/05/06 12:16 p.m.8 views

CVE-2025-71286

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls The size of the data behind of scontrol-ipccontroldata for bytes controls is: 1 sizeofstruct sofipc4controldata + // kernel only struct 2 sizeofstruct...

7.8CVSS0.00138EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2026/05/06 11:32 a.m.10 views

CVE-2025-71286

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls The size of the data behind of scontrol-ipccontroldata for bytes controls is: 1 sizeofstruct sofipc4controldata + // kernel only struct 2 sizeofstruct...

7.8CVSS5.7AI score0.00138EPSS
SaveExploits0
OSV
OSV
added 2026/05/06 11:32 a.m.8 views

CVE-2025-71286 ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls The size of the data behind of scontrol-ipccontroldata for bytes controls is: 1 sizeofstruct sofipc4controldata + // kernel only struct 2 sizeofstruct...

7.8CVSS5.9AI score
SaveExploits0References8
Cvelist
Cvelist
added 2026/05/06 11:32 a.m.54 views

CVE-2025-71286 ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls The size of the data behind of scontrol-ipccontroldata for bytes controls is: 1 sizeofstruct sofipc4controldata + // kernel only struct 2 sizeofstruct...

7.8CVSS0.00138EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/05/06 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2025-71286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls The size of the data behind of scontrol-ipccontroldata for bytes controls is: 1...

7.8CVSS5.9AI score0.00138EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/05/06 12:0 a.m.14 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an incorrect allocation of byte control data in the ipc4-topology module of the SOF audio driver...

5.5CVSS5.8AI score0.00138EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2025/12/30 1:16 p.m.7 views

CVE-2023-54233

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: avoid a NULL dereference with unsupported widgets If an IPC4 topology contains an unsupported widget, its .moduleinfo field won't be set, then sofipc4routesetup will cause a kernel Oops trying to dereference it. Add a...

5.7AI score0.00162EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/12/30 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2023-54233

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: SOF: avoid a NULL dereference with unsupported widgets If an IPC4 topology contains an unsupported widget, its .moduleinfo field won't be set, then...

5.9AI score0.00162EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.9 views

EUVD-2023-59733

Malicious code in bioql PyPI...

4.9AI score0.00241EPSS
SaveExploits0References2
NVD
NVD
added 2025/06/18 11:15 a.m.7 views

CVE-2022-50016

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: cnl: Do not process IPC reply before firmware boot It is not yet clear, but it is possible to create a firmware so broken that it will send a reply message before a FWREADY message it is not yet clear if FWREADY...

5.5CVSS0.00184EPSS
SaveExploits0References2
OSV
OSV
added 2025/06/18 11:1 a.m.8 views

CVE-2022-50016 ASoC: SOF: Intel: cnl: Do not process IPC reply before firmware boot

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: cnl: Do not process IPC reply before firmware boot It is not yet clear, but it is possible to create a firmware so broken that it will send a reply message before a FWREADY message it is not yet clear if FWREADY...

5.8AI score
SaveExploits0References5
CVE
CVE
added 2025/06/18 11:1 a.m.107 views

CVE-2022-50015

CVE-2022-50015 : In the Linux kernel ASoC: SOF Intel hda-ipc, there is a vulnerability where a firmware could send a reply before the FW_READY message. Since reply_data is allocated after FW_READY, this can cause a NULL pointer dereference. The issue was reported for IPC4 and the same condition e...

5.5CVSS6.5AI score0.00179EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2025/06/18 11:1 a.m.20 views

CVE-2022-50015 ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot It is not yet clear, but it is possible to create a firmware so broken that it will send a reply message before a FWREADY message it is not yet clear if...

0.00179EPSS
SaveExploits0References2
OSV
OSV
added 2025/06/18 11:1 a.m.7 views

CVE-2022-50015 ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot It is not yet clear, but it is possible to create a firmware so broken that it will send a reply message before a FWREADY message it is not yet clear if...

5.8AI score
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/03/29 5:51 p.m.25 views

CVE-2023-52987

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-mtrace: prevent underflow in sofipc4prioritymaskdfswrite The "id" comes from the user. Change the type to unsigned to prevent an array underflow...

4.4CVSS7.1AI score0.00241EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2025/03/27 4:43 p.m.12 views

CVE-2023-52987

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-mtrace: prevent underflow in sofipc4prioritymaskdfswrite The "id" comes from the user. Change the type to unsigned to prevent an array underflow...

7.8CVSS5.4AI score0.00241EPSS
SaveExploits0
CVE
CVE
added 2025/03/27 4:43 p.m.69 views

CVE-2023-52987

CVE-2023-52987 affects the Linux kernel ASoC SOF component: ipc4-mtrace code path. The vulnerability arises from an underflow in sof_ipc4_priority_mask_dfs_write() caused by using a signed id that should be unsigned, leading to an array underflow. The available connected documents consistently st...

7.8CVSS6.5AI score0.00241EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2025/03/27 4:43 p.m.11 views

CVE-2023-52987 ASoC: SOF: ipc4-mtrace: prevent underflow in sof_ipc4_priority_mask_dfs_write()

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-mtrace: prevent underflow in sofipc4prioritymaskdfswrite The "id" comes from the user. Change the type to unsigned to prevent an array underflow...

7.8CVSS4.4AI score
SaveExploits0References5
Rows per page
Query Builder