DEBIAN-CVE-2024-42088

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8195: Add platform entry for ETDM1OUTBE dai link Commit e70b8dd26711 ("ASoC: mediatek: mt8195: Remove afe-dai component and rework codec link") removed the codec entry for the ETDM1OUTBE dai link entirely instead of replacing it with COMPEMPTY(). This worked by accident as the remaining COMPEMPTY() platform entry became the codec entry, and the platform entry became completely empty, effectively the same as COMPDUMMY() since sndsocfilldummydai() doesn't do anything for platform entries. This causes a KASAN out-of-bounds warning in mtksoundcardcommonprobe() in sound/soc/mediatek/common/mtk-soundcard-driver.c: foreachcardprelinks(card, i, dailink) { if (adspnode && !strncmp(dailink->name, "AFESOF", strlen("AFESOF"))) dailink->platforms->ofnode = adspnode; else if (!dailink->platforms->name && !dailink->platforms->ofnode) dailink->platforms->ofnode = platformnode; } where the code expects the platforms array to have space for at least one entry. Add an COMPEMPTY() entry so that dai_link->platforms has space.