PT-2024-28092 · Linux+6 · Linux Kernel+6
Pierre-Louis Bossart
·
Published
2024-03-26
·
Updated
2025-09-29
·
CVE-2024-38635
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.37
Description
The issue is related to an out-of-bounds access in the soundwire cadence component. The code adds an offset to the PDI, presumably to skip the PDI0 and PDI1, which are reserved for BPT. However, this code is incorrect and leads to an out-of-bounds access. A follow-up patch completely removes this useless offset.
Recommendations
Update to Linux kernel version 6.6.37 or later to resolve the issue. As a temporary workaround, consider restricting access to the soundwire cadence component until a patch is available.
Exploit
Fix
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Hat
Red Os
Suse
Ubuntu