Executive brief
A vulnerability was discovered in the Linux kernel's audio driver for MediaTek MT8365 processors. This component is responsible for managing digital audio interfaces on devices using this hardware. An exploit could allow a local user to cause a system crash or potentially access sensitive information from the system's memory, impacting the reliability and security of the device.
Technical details
An out-of-bounds write vulnerability exists in the Linux kernel's ASoC (ALSA System on Chip) driver for MediaTek MT8365 (mt8365-dai-i2s). The issue stems from passing an incorrect structure size to the mt8365_dai_set_priv function. Specifically, the code incorrectly used the size of 'struct mt8365_afe_private' instead of the intended 'struct mtk_afe_i2s_priv' during memory allocation and copying. A local attacker with low privileges could trigger this out-of-bounds access, leading to a kernel panic (DoS) or potential information disclosure. The vulnerability has been addressed in stable kernel branches 6.12.41, 6.15.9, and 6.16.
Affected products
- Linux Linux Kernel 6.12 to 6.12.41, 6.13 to 6.15.9
Timeline
- 2025-08-22: disclosed
- 2025-08-01: patched