CVE-2023-53788

Linux Kernel - Buffer Overrun in ALSA HDA CA0132 tuning_ctl_set()

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() tuning_ctl_set() might have buffer overrun at (X) if it didn't break from loop by matching (A). static int tuning_ctl_set(...) { for (i = 0; i < TUNING_CTLS_COUNT; i++) (A) if (nid == ca0132_tuning_ctls[i].nid) break; snd_hda_power_up(...); (X) dspio_set_param(..., ca0132_tuning_ctls[i].mid, ...); snd_hda_power_down(...); ^ return 1; } We will get below error by cppcheck sound/pci/hda/patch_ca0132.c:4229:2: note: After for loop, i has value 12 for (i = 0; i < TUNING_CTLS_COUNT; i++) ^ sound/pci/hda/patch_ca0132.c:4234:43: note: Array index out of bounds dspio_set_param(codec, ca0132_tuning_ctls[i].mid, 0x20, ^ This patch cares non match case.

Scores

EPSS 0.0019
EPSS Percentile 8.7%

Details

Status published
Products (25)
linux/Kernel 3.9.0 - 4.14.312linux
linux/Kernel 4.15.0 - 4.19.280linux
linux/Kernel 4.20.0 - 5.4.240linux
linux/Kernel 5.11.0 - 5.15.106linux
linux/Kernel 5.16.0 - 6.1.23linux
linux/Kernel 5.5.0 - 5.10.177linux
linux/Kernel 6.2.0 - 6.2.10linux
Linux/Linux < 3.9
Linux/Linux 3.9
Linux/Linux 4.14.312 - 4.14.*
... and 15 more
Published Dec 09, 2025
Tracked Since Feb 18, 2026