CVE-2023-54245

A slab-out-of-bounds read vulnerability was found in the Linux kernel's ASoC tx-macro codec driver. The decimator variable was incorrectly sized at 32 bits, causing regcache_flat_read() to access memory beyond the allocated slab when reading register cache values during the tx_macro_digital_mute() operation. The fix limits the variable to u8 type.

This flaw affects systems with Qualcomm audio codec hardware using the tx-macro driver. The out-of-bounds read can cause a kernel crash when audio mute operations are performed. Exploitation requires local access and the presence of specific audio hardware, limiting the affected systems.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the snd_soc_tx_macro module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.