In the Linux kernel, the following vulnerability has been resolved:
ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls
The size of the data behind of scontrol->ipccontroldata for bytes controls is: [1] sizeof(struct sofipc4controldata) + // kernel only struct [2] sizeof(struct sofabi_hdr)) + payload
The max_size specifies the size of [2] and it is coming from topology.
Change the function to take this into account and allocate adequate amount of memory behind scontrol->ipccontroldata.
With the change we will allocate [1] amount more memory to be able to hold the full size of data.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71286.json",
"cna_assigner": "Linux"
}