Linux Kernel ASoC Intel Quirk Input Mapping Vulnerability

A vulnerability exists in the Linux kernel's ASoC Intel bytcr_rt5640 driver, where invalid values passed through the quirk option are not properly handled. Instead of correcting the input, the driver merely logs an error, which can lead to unexpected behavior such as out-of-bounds access. This issue has been addressed by modifying the driver to map invalid quirk inputs to a default value, thereby preventing potential out-of-bounds access.

Impact

The vulnerability could lead to out-of-bounds access, which may cause memory corruption or other unintended behavior.

Reproduction

To reproduce this vulnerability, load the ASoC Intel bytcr_rt5640 driver and pass an invalid value through the quirk option. The driver will log an error but will not correct the input, potentially leading to out-of-bounds access.

Remediation

The vulnerability has been fixed in the Linux kernel. Users should upgrade to the latest version.