CVE-2024-53045

Summary

CVE-2024-53045 is a vulnerability affecting the Linux kernel's Advanced Simple Sound Architecture (ASoC) subsystem. The issue lies in the dapm (Dynamic Power Management) component, specifically with the function dapm_widget_list_create. The widgets array in this function has an incorrect initialization of its __counted_by attribute, which is used for bounds checking. If the attribute is not set before filling the array, the Linux kernel may experience a warning or a panic if the configuration for detecting bounds errors is enabled. This vulnerability has been mitigated by setting the size of the widgets list as the initial value for num_widgets, which is updated after the array is filled.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.