Linux Kernel MIPI-SDCA Control Integer Array Memory Allocation Vulnerability

A vulnerability in the Linux kernel's ASoC SDCA component has been addressed. The issue arose because the 'values' field in the 'sdca_control' structure was declared as an integer array, but the allocated memory was a character array. This mismatch caused a crash in the 'sdca_parse_function' API. The vulnerability has been resolved by allocating the correct data size for the 'values' field.

Impact

The vulnerability could lead to a crash in the 'sdca_parse_function' API, causing a denial of service.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the Linux kernel official website.