Linux Kernel Buffer Overflow Vulnerability in ASoC Intel AVS Component

Vulnerability

A potential buffer overflow vulnerability has been identified in the Linux kernel's ASoC Intel AVS component. The issue arises from the use of snprintf(), which can return a size that exceeds the buffer capacity, leading to a buffer overflow, albeit in a highly unlikely scenario. This vulnerability has been addressed by replacing snprintf() with the safer scnprintf() function, which mitigates the risk of such an overflow.

Impact

Exploitation of this vulnerability could lead to a buffer overflow, which may be used to execute arbitrary code or cause a denial-of-service condition.

Added: Jun 18, 2025, 6:56 PM
Updated: Jun 18, 2025, 6:56 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
5.3
remediation
0.0
relevance
0.2
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.