Linux Kernel Buffer Overflow Vulnerability in ASoC SOF Debug Component

Vulnerability

A potential buffer overflow vulnerability has been identified in the Linux kernel's ASoC SOF debug component. The issue arises because the snprintf() function can indicate a larger string size than the buffer can accommodate, leading to a buffer overflow, although such an overflow is considered unlikely. This vulnerability has been addressed by replacing snprintf() with the safer scnprintf() function, which prevents such potential issues.

Impact

Exploitation of this vulnerability could lead to a buffer overflow, which may be exploited to execute arbitrary code or cause a denial-of-service condition.

Added: Jun 18, 2025, 6:58 PM
Updated: Jun 18, 2025, 6:58 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.0
remediation
0.0
relevance
0.2
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.