CVE-2023-53640
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
07/10/2025
Última modificación:
08/10/2025
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ASoC: lpass: Fix for KASAN use_after_free out of bounds<br />
<br />
When we run syzkaller we get below Out of Bounds error.<br />
<br />
"KASAN: slab-out-of-bounds Read in regcache_flat_read"<br />
<br />
Below is the backtrace of the issue:<br />
<br />
BUG: KASAN: slab-out-of-bounds in regcache_flat_read+0x10c/0x110<br />
Read of size 4 at addr ffffff8088fbf714 by task syz-executor.4/14144<br />
CPU: 6 PID: 14144 Comm: syz-executor.4 Tainted: G W<br />
Hardware name: Qualcomm Technologies, Inc. sc7280 CRD platform (rev5+) (DT)<br />
Call trace:<br />
dump_backtrace+0x0/0x4ec<br />
show_stack+0x34/0x50<br />
dump_stack_lvl+0xdc/0x11c<br />
print_address_description+0x30/0x2d8<br />
kasan_report+0x178/0x1e4<br />
__asan_report_load4_noabort+0x44/0x50<br />
regcache_flat_read+0x10c/0x110<br />
regcache_read+0xf8/0x5a0<br />
_regmap_read+0x45c/0x86c<br />
_regmap_update_bits+0x128/0x290<br />
regmap_update_bits_base+0xc0/0x15c<br />
snd_soc_component_update_bits+0xa8/0x22c<br />
snd_soc_component_write_field+0x68/0xd4<br />
tx_macro_put_dec_enum+0x1d0/0x268<br />
snd_ctl_elem_write+0x288/0x474<br />
<br />
By Error checking and checking valid values issue gets rectifies.



