CyberRota Analysis
AI-GeneratedThe vulnerability affects the ALSA portman2x4 driver in the Linux kernel, where insufficient validation of the device ID can lead to out-of-bounds access to the index array and other parameters. This flaw may allow an attacker to exploit the driver, potentially leading to system instability or unauthorized access. Linux system administrators and developers working with ALSA drivers should prioritize addressing this issue to mitigate potential risks.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: portman2x4: Check card index validity at probe Although portman2x4 driver has a check of the given devptr->id value, it doesn't check for a negative id, which is often given as "none" or such value when bound via sysfs. This may lead to OOB access for index[] and other parameters. Add a sanity check for the card index and warn/correct it if it's a value out of the range.