In the Linux kernel, the following vulnerability has been resolved:
ASoC: mediatek: mt8365-dai-i2s: pass correct size to mt8365_dai_set_priv
Given mt8365_dai_set_priv allocate priv_size space to copy priv_data which means we should pass mt8365_i2s_priv[i] or "struct mtk_afe_i2s_priv" instead of afe_priv which has the size of "struct mt8365_afe_private".
Otherwise the KASAN complains about.
[ 59.389765] BUG: KASAN: global-out-of-bounds in mt8365_dai_set_priv+0xc8/0x168 [snd_soc_mt8365_pcm] ... [ 59.394789] Call trace: [ 59.395167] dump_backtrace+0xa0/0x128 [ 59.395733] show_stack+0x20/0x38 [ 59.396238] dump_stack_lvl+0xe8/0x148 [ 59.396806] print_report+0x37c/0x5e0 [ 59.397358] kasan_report+0xac/0xf8 [ 59.397885] kasan_check_range+0xe8/0x190 [ 59.398485] asan_memcpy+0x3c/0x98 [ 59.399022] mt8365_dai_set_priv+0xc8/0x168 [snd_soc_mt8365_pcm] [ 59.399928] mt8365_dai_i2s_register+0x1e8/0x2b0 [snd_soc_mt8365_pcm] [ 59.400893] mt8365_afe_pcm_dev_probe+0x4d0/0xdf0 [snd_soc_mt8365_pcm] [ 59.401873] platform_probe+0xcc/0x228 [ 59.402442] really_probe+0x340/0x9e8 [ 59.402992] driver_probe_device+0x16c/0x3f8 [ 59.403638] driver_probe_device+0x64/0x1d8 [ 59.404256] driver_attach+0x1dc/0x4c8 [ 59.404840] bus_for_each_dev+0x100/0x190 [ 59.405442] driver_attach+0x44/0x68 [ 59.405980] bus_add_driver+0x23c/0x500 [ 59.406550] driver_register+0xf8/0x3d0 [ 59.407122] platform_driver_register+0x68/0x98 [ 59.407810] mt8365_afe_pcm_driver_init+0x2c/0xff8 [snd_soc_mt8365_pcm]
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-kvmsmall-vdsoUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-64kbUpgrade dtb-appleUpgrade kernel-source-vanillaUpgrade dtb-amazonUpgrade kernel-rt-optionalUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade dtb-marvellUpgrade dtb-alteraUpgrade kernel-kvmsmallUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-exynosUpgrade dtb-renesasUpgrade dtb-caviumUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade dlm-kmp-64kbUpgrade kernel-default-vdsoUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-symsUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade dtb-amlogicUpgrade dtb-sprdUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade kselftests-kmp-rtUpgrade kernel-rt-extraUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade kernel-macrosUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade dtb-qcomUpgrade kernel-rtUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-apmUpgrade dlm-kmp-default | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-aws-64k-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-gcpUpgrade linux-image-realtimeUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-oracle-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-virtualUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-azure-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-gcp-64kUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-generic-6.14Upgrade linux-image-genericUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-raspi-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-36-generic-64k | Nov 25, 2025 | Nov 21, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub