CVE-2023-52987

Source
https://nvd.nist.gov/vuln/detail/CVE-2023-52987
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52987.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-52987
Downstream
Published
2025-03-27T16:43:24.225Z
Modified
2025-11-28T02:35:08.596403Z
Summary
ASoC: SOF: ipc4-mtrace: prevent underflow in sof_ipc4_priority_mask_dfs_write()
Details

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: ipc4-mtrace: prevent underflow in sofipc4prioritymaskdfs_write()

The "id" comes from the user. Change the type to unsigned to prevent an array underflow.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52987.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f4ea22f7aa7536560097d765be56445933d07e0d
Fixed
d52f34784e4e2f6e77671a9f104d8a69a3b5d24c
Fixed
ea57680af47587397f5005d7758022441ed66d54

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.1.0
Fixed
6.1.11