CVE-2024-38635

soundwire: cadence: fix invalid PDI offset

State: Published
Severity: 7.8 High
Published: Jun 21, 2024
Updated: Oct 15, 2026
Reserved: Jun 18, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

soundwire: cadence: fix invalid PDI offset

For some reason, we add an offset to the PDI, presumably to skip the PDI0 and PDI1 which are reserved for BPT.

This code is however completely wrong and leads to an out-of-bounds access. We were just lucky so far since we used only a couple of PDIs and remained within the PDI array bounds.

A Fixes: tag is not provided since there are no known platforms where the out-of-bounds would be accessed, and the initial code had problems as well.

A follow-up patch completely removes this useless offset.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 002364b2d594a9afc0385c09e00994c510b1d089Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fd4bcb991ebaf0d1813d81d9983cfa99f9ef5328Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 902f6d656441a511ac25c6cffce74496db10a078Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2ebcaa0e5db9b6044bb487ae1cf41bc601761567Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7eeef1e935d23db5265233d92395bd5c648a4021Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4e99103f757cdf636c6ee860994a19a346a11785Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8ee1b439b1540ae543149b15a2a61b9dff937d91Affected before 5.4.278Affected before 5.10.219Affected before 5.15.161Affected before 6.1.93Affected before 6.6.33Affected before 6.9.4Affected
LinuxLinux	5.4.278 through 5.4.Not affected 5.10.219 through 5.10.Not affected 5.15.161 through 5.15.Not affected 6.1.93 through 6.1.Not affected 6.6.33 through 6.6.Not affected 6.9.4 through 6.9.Not affected 6.10 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 002364b2d594a9afc0385c09e00994c510b1d089Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fd4bcb991ebaf0d1813d81d9983cfa99f9ef5328Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 902f6d656441a511ac25c6cffce74496db10a078Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2ebcaa0e5db9b6044bb487ae1cf41bc601761567Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7eeef1e935d23db5265233d92395bd5c648a4021Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4e99103f757cdf636c6ee860994a19a346a11785Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8ee1b439b1540ae543149b15a2a61b9dff937d91Affected
before 5.4.278Affected
before 5.10.219Affected
before 5.15.161Affected
before 6.1.93Affected
before 6.6.33Affected
before 6.9.4Affected

LinuxLinux

5.4.278 through 5.4.*Not affected
5.10.219 through 5.10.*Not affected
5.15.161 through 5.15.*Not affected
6.1.93 through 6.1.*Not affected
6.6.33 through 6.6.*Not affected
6.9.4 through 6.9.*Not affected
6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.