CVE-2024-53045 ASoC: dapm: fix bounds checker error in dapm_widget_list_create
A bounds checker error in the Linux kernel's ASoC DAPM subsystem can cause a kernel panic if UBSAN_TRAP is enabled, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-53045?
CVE-2024-53045 is a medium-severity denial of service vulnerability in Linux kernel, published on 19 Nov 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
ASoC: dapm: fix bounds checker error in dapm_widget_list_create
The widgets array in the snd_soc_dapm_widget_list has a __counted_by attribute attached to it, which points to the num_widgets variable. This attribute is used in bounds checking, and if it is not set before the array is filled, then the bounds sanitizer will issue a warning or a kernel panic if CONFIG_UBSAN_TRAP is set.
This patch sets the size of the widgets list calculated with list_for_each as the initial value for num_widgets as it is used for allocating memory for the array. It is updated with the actual number of added elements after the array is filled.
Which versions are affected by CVE-2024-53045?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-53045?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2024-53045 being exploited?
There is no known exploitation of CVE-2024-53045 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2024-53045, DEBIAN-CVE-2024-53045, GHSA-xrg9-2q4w-gf5c, UBUNTU-CVE-2024-53045.