Security Advisory
CVE-2024-50007
7.8
HIGH
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
ALSA: asihpi: Fix potential OOB array access
ASIHPI driver stores some values in the static array upon a response
from the driver, and its index depends on the firmware. We shouldn't
trust it blindly.
This patch adds a sanity check of the array index to fit in the array
size.
Published Date
October 21, 2024
Official Source
NIST NVD Advisory