Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix potential RX buffer overflow If an event caused firmware to return invalid RX size for LARGE_CONFIG_GET, memcpy_fromio() could end up copying too many bytes. Fix by utilizing min_t().
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected f14a1c5a9f830025dc8638303ddefd5f731ae4bc before ec1f0c12cb2e614c3fa8e9402f7ffcf82166078a; affected f14a1c5a9f830025dc8638303ddefd5f731ae4bc before 0bad12fee5ae16ab439d97c66c4238f5f4cc7f68; affected f14a1c5a9f830025dc8638303ddefd5f731ae4bc before 23ae34e033b2c0e5e88237af82b163b296fd6aa9 |
| Linux / Linux | affected 5.18; unaffected 0 before 5.18; unaffected 6.0.16 through 6.0.*; unaffected 6.1.2 through 6.1.*; unaffected 6.2 through * |
CWE
No CWE identifiers supplied.