Linux Kernel ASoC Codec SMA1307 Memory Corruption Vulnerability

A memory corruption vulnerability has been identified in the Linux kernel's ASoC codec driver for the SMA1307. The issue arises because the driver allocates only 8 bytes for a header that requires space for 8 integers. This mismatch leads to memory corruption when the driver copies data into the header. The vulnerability has been addressed by changing the memory allocation to the correct size and using a more appropriate allocation function. The issue was introduced in a previous commit that added support for the SMA1307 codec.

Impact

Exploitation of this vulnerability could lead to memory corruption, which may cause undefined behavior in the kernel, potentially allowing for arbitrary code execution or escalation of privileges.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.