← Back to CVE List

CVE-2024-26927

Published: 2024-04-28T12:15Z
Last Modified: 2025-03-21T14:50Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Add some bounds checking to firmware data Smatch complains about "head->full_size - head->header_size" can underflow. To some extent, we're always going to have to trust the firmware a bit. However, it's easy enough to add a check for negatives, and let's add a upper bounds check as well. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt