Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's ASoC SOF IPC3 topology handling can lead to out-of-bounds access. The issue arises in the 'sof_get_control_data()' function, which expects to process only byte-type payloads. However, it also accommodates other control types, leading to potential memory access errors. The vulnerability can be exploited by crafting a specific topology that misaligns with the expected data types.
Exploitation of this vulnerability could result in out-of-bounds memory access, potentially leading to memory corruption or arbitrary code execution.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.