CVE-2023-52987

In the Linux kernel, the following vulnerability has been resolved:

ASoC: SOF: ipc4-mtrace: prevent underflow in sof_ipc4_priority_mask_dfs_write()

The "id" comes from the user. Change the type to unsigned to prevent an array underflow.

This vulnerability is rated as Low severity for Red Hat Enterprise Linux because triggering the issue requires local administrative privileges to write to debugfs entries. Debugfs interfaces are restricted to privileged users by default across Red Hat Enterprise Linux installations, preventing unprivileged users from exploiting the flaw. Furthermore, the affected Sound Open Firmware tracing component is only active on systems equipped with specific audio hardware utilizing SOF IPC4 firmware, which is not typical in standard server deployments. As a result, the risk is confined to a localized denial of service initiated by a user that already possesses elevated privileges.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.