In the Linux kernel, the following vulnerability has been resolved:
ASoC: qcom: Fix sc7280 lpass potential buffer overflow
Case values introduced in commit 5f78e1fb7a3e ("ASoC: qcom: Add driver support for audioreach solution") cause out of bounds access in arrays of sc7280 driver data (e.g. in case of RX_CODEC_DMA_RX_0 in sc7280_snd_hw_params()).
Redefine LPASS_MAX_PORTS to consider the maximum possible port id for q6dsp as sc7280 driver utilizes some of those values.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Suse | — | Upgrade kernel-source-azureUpgrade dtb-apmUpgrade dtb-appleUpgrade kernel-azure-extraUpgrade kernel-default-livepatchUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-debugUpgrade dtb-amdUpgrade dtb-freescaleUpgrade kernel-debug-develUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade kernel-obs-qaUpgrade dtb-alteraUpgrade kernel-64kbUpgrade dtb-broadcomUpgrade dtb-renesasUpgrade dtb-amlogicUpgrade dtb-socionextUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-default-optionalUpgrade dtb-marvellUpgrade kernel-azure-optionalUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade gfs2-kmp-rtUpgrade kernel-devel-rtUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade dtb-hisiliconUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade kernel-develUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-develUpgrade kernel-default-baseUpgrade dtb-lgUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade kernel-source-rtUpgrade kernel-rt-develUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade kernel-syms-rtUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-extraUpgrade dtb-qcomUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade dlm-kmp-rtUpgrade kselftests-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade kernel-source-vanilla | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-gkeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-genericUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-xilinxUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-gcp-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-awsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-kvmUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-azureUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-aws-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-64k-hwe-22.04 | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 20, 2025 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub