CVE-2023-52987

Source
https://nvd.nist.gov/vuln/detail/CVE-2023-52987
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52987.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-52987
Downstream
Published
2025-03-27T16:43:24Z
Modified
2025-10-16T14:11:28.913690Z
Summary
ASoC: SOF: ipc4-mtrace: prevent underflow in sof_ipc4_priority_mask_dfs_write()
Details

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: ipc4-mtrace: prevent underflow in sofipc4prioritymaskdfs_write()

The "id" comes from the user. Change the type to unsigned to prevent an array underflow.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f4ea22f7aa7536560097d765be56445933d07e0d
Fixed
d52f34784e4e2f6e77671a9f104d8a69a3b5d24c
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f4ea22f7aa7536560097d765be56445933d07e0d
Fixed
ea57680af47587397f5005d7758022441ed66d54

Affected versions

v6.*

v6.0
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.1.1
v6.1.10
v6.1.2
v6.1.3
v6.1.4
v6.1.5
v6.1.6
v6.1.7
v6.1.8
v6.1.9
v6.2-rc1

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.1.0
Fixed
6.1.11