CVE-2024-42088

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-42088
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-42088.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-42088
Downstream
Published
2024-07-29T16:26:28Z
Modified
2025-10-17T09:15:53.826547Z
Summary
ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link
Details

In the Linux kernel, the following vulnerability has been resolved:

ASoC: mediatek: mt8195: Add platform entry for ETDM1OUTBE dai link

Commit e70b8dd26711 ("ASoC: mediatek: mt8195: Remove afe-dai component and rework codec link") removed the codec entry for the ETDM1OUTBE dai link entirely instead of replacing it with COMPEMPTY(). This worked by accident as the remaining COMPEMPTY() platform entry became the codec entry, and the platform entry became completely empty, effectively the same as COMPDUMMY() since sndsocfilldummy_dai() doesn't do anything for platform entries.

This causes a KASAN out-of-bounds warning in mtksoundcardcommon_probe() in sound/soc/mediatek/common/mtk-soundcard-driver.c:

for_each_card_prelinks(card, i, dai_link) {
    if (adsp_node && !strncmp(dai_link->name, "AFE_SOF", strlen("AFE_SOF")))
        dai_link->platforms->of_node = adsp_node;
    else if (!dai_link->platforms->name && !dai_link->platforms->of_node)
        dai_link->platforms->of_node = platform_node;
}

where the code expects the platforms array to have space for at least one entry.

Add an COMPEMPTY() entry so that dailink->platforms has space.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e70b8dd26711704b1ff1f1b4eb3d048ba69e29da
Fixed
42b9ab7a4d7e6c5efd71847541e4fcc213585aad
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e70b8dd26711704b1ff1f1b4eb3d048ba69e29da
Fixed
282a4482e198e03781c152c88aac8aa382ef9a55

Affected versions

v6.*

v6.10-rc1
v6.10-rc2
v6.7
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7
v6.9.1
v6.9.2
v6.9.3
v6.9.4
v6.9.5
v6.9.6
v6.9.7

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.8.0
Fixed
6.9.8