Linux Kernel ALSA HDA/VIA Potential Out-of-Bounds Access Vulnerability

A vulnerability in the Linux kernel's Advanced Linux Sound Architecture (ALSA) subsystem, specifically within the High Definition Audio (HDA) VIA driver, has been addressed. The issue involved a potential array out-of-bounds access in the 'add_secret_dac_path()' function. The problem arose because 'snd_hda_get_connections()' could return a negative error code, leading to the 'conn' array being accessed at a negative index.

Impact

Exploitation of this vulnerability could lead to out-of-bounds memory access, which may cause undefined behavior such as memory corruption.