CVE-2024-53045
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-53045
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-53045.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-53045
- Downstream
- Related
- Published
- 2024-11-19T17:19:32Z
- Modified
- 2025-10-09T22:33:11.888705Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- ASoC: dapm: fix bounds checker error in dapm_widget_list_create
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
ASoC: dapm: fix bounds checker error in dapmwidgetlist_create
The widgets array in the sndsocdapmwidgetlist has a _countedby attribute attached to it, which points to the numwidgets variable. This attribute is used in bounds checking, and if it is not set before the array is filled, then the bounds sanitizer will issue a warning or a kernel panic if CONFIGUBSAN_TRAP is set.
This patch sets the size of the widgets list calculated with listforeach as the initial value for num_widgets as it is used for allocating memory for the array. It is updated with the actual number of added elements after the array is filled.
- References
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced80e698e2df5ba2124bdeca37f1e589de58a4d514Fixedc549cb66e8de0ba1936fc97a59f0156741d3492a
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced80e698e2df5ba2124bdeca37f1e589de58a4d514Fixed2ef9439f7a19fd3d43b288d38b1c6e55b668a4fe
Affected versions
v6.*
v6.10
v6.10-rc1
v6.10-rc2
v6.10-rc3
v6.10-rc4
v6.10-rc5
v6.10-rc6
v6.10-rc7
v6.11
v6.11-rc1
v6.11-rc2
v6.11-rc3
v6.11-rc4
v6.11-rc5
v6.11-rc6
v6.11-rc7
v6.11.1
v6.11.2
v6.11.3
v6.11.4
v6.11.5
v6.11.6
v6.12-rc1
v6.12-rc2
v6.6
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.9
v6.9-rc1
v6.9-rc2
v6.9-rc3
v6.9-rc4
v6.9-rc5
v6.9-rc6
v6.9-rc7