In the Linux kernel, the following vulnerability has been resolved:
ASoC: qcom: Fix sc7280 lpass potential buffer overflow
Case values introduced in commit 5f78e1fb7a3e ("ASoC: qcom: Add driver support for audioreach solution") cause out of bounds access in arrays of sc7280 driver data (e.g. in case of RX_CODEC_DMA_RX_0 in sc7280_snd_hw_params()).
Redefine LPASS_MAX_PORTS to consider the maximum possible port id for q6dsp as sc7280 driver utilizes some of those values.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | May 28, 2025 | May 20, 2025 |
| Suse | — | Upgrade dtb-lgUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade dtb-amdUpgrade kernel-default-extraUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-64kbUpgrade dtb-amazonUpgrade gfs2-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-obs-qaUpgrade kernel-64kbUpgrade kernel-sourceUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade kernel-default-livepatch-develUpgrade kernel-symsUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-devel-azureUpgrade dtb-freescaleUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-develUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-alteraUpgrade ocfs2-kmp-64kbUpgrade kernel-macrosUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-defaultUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade kernel-rt_debugUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade dtb-socionextUpgrade dtb-marvellUpgrade dtb-hisiliconUpgrade dtb-amlogicUpgrade dtb-appleUpgrade kernel-rt_debug-develUpgrade kernel-source-azureUpgrade kernel-devel-rtUpgrade kernel-azure-extraUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade dtb-broadcomUpgrade kernel-64kb-develUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-develUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade dtb-armUpgrade dtb-sprdUpgrade dtb-mediatekUpgrade kselftests-kmp-azureUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade dlm-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade dtb-rockchipUpgrade kernel-syms-azureUpgrade kernel-azureUpgrade dtb-caviumUpgrade kernel-source-rtUpgrade kernel-syms-rtUpgrade kernel-rtUpgrade dtb-qcomUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-rt-livepatch-devel | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gkeop-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-oracleUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-xilinxUpgrade linux-image-fips-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-ibm-6.8Upgrade linux-image-aws-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-genericUpgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gkeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-virtualUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-awsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-azure-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-gcp-64kUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-fipsUpgrade linux-image-raspi-6.8Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-ibmUpgrade linux-image-gke-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-gke-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-azureUpgrade linux-image-gcp-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-fde | Jun 26, 2025 | May 20, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub