Analytical use of cookies
CVE-2024-50007CVSS 7.8Linux
CVE-2024-50007: debian linux vulnerability
In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access ASIHPI driver stores some values in the static array upon a response from the driver, and its index depends on the firmware. We shouldn't trust it blindly. This patch adds a sanity check of the array index to fit in the array size.
- CVSS
- 7.8 HIGH
- EPSS
- 16.25%
- Активно використовується
- немає в KEV
- Продукт
- debian linux
Що відомо
In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access ASIHPI driver stores some values in the static array upon a response from the driver, and its index depends on the firmware. We shouldn't trust it blindly. This patch adds a sanity check of the array index to fit in the array size.