{"id":"CVE-2025-38662","summary":"ASoC: mediatek: mt8365-dai-i2s: pass correct size to mt8365_dai_set_priv","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: mediatek: mt8365-dai-i2s: pass correct size to mt8365_dai_set_priv\n\nGiven mt8365_dai_set_priv allocate priv_size space to copy priv_data which\nmeans we should pass mt8365_i2s_priv[i] or \"struct mtk_afe_i2s_priv\"\ninstead of afe_priv which has the size of \"struct mt8365_afe_private\".\n\nOtherwise the KASAN complains about.\n\n[   59.389765] BUG: KASAN: global-out-of-bounds in mt8365_dai_set_priv+0xc8/0x168 [snd_soc_mt8365_pcm]\n...\n[   59.394789] Call trace:\n[   59.395167]  dump_backtrace+0xa0/0x128\n[   59.395733]  show_stack+0x20/0x38\n[   59.396238]  dump_stack_lvl+0xe8/0x148\n[   59.396806]  print_report+0x37c/0x5e0\n[   59.397358]  kasan_report+0xac/0xf8\n[   59.397885]  kasan_check_range+0xe8/0x190\n[   59.398485]  asan_memcpy+0x3c/0x98\n[   59.399022]  mt8365_dai_set_priv+0xc8/0x168 [snd_soc_mt8365_pcm]\n[   59.399928]  mt8365_dai_i2s_register+0x1e8/0x2b0 [snd_soc_mt8365_pcm]\n[   59.400893]  mt8365_afe_pcm_dev_probe+0x4d0/0xdf0 [snd_soc_mt8365_pcm]\n[   59.401873]  platform_probe+0xcc/0x228\n[   59.402442]  really_probe+0x340/0x9e8\n[   59.402992]  driver_probe_device+0x16c/0x3f8\n[   59.403638]  driver_probe_device+0x64/0x1d8\n[   59.404256]  driver_attach+0x1dc/0x4c8\n[   59.404840]  bus_for_each_dev+0x100/0x190\n[   59.405442]  driver_attach+0x44/0x68\n[   59.405980]  bus_add_driver+0x23c/0x500\n[   59.406550]  driver_register+0xf8/0x3d0\n[   59.407122]  platform_driver_register+0x68/0x98\n[   59.407810]  mt8365_afe_pcm_driver_init+0x2c/0xff8 [snd_soc_mt8365_pcm]","modified":"2026-04-02T12:48:04.531749Z","published":"2025-08-22T16:02:55.078Z","related":["SUSE-SU-2025:21074-1","SUSE-SU-2025:21139-1","SUSE-SU-2025:21179-1","openSUSE-SU-2025:20081-1"],"database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38662.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/1dc0ed16cfbc3c28a07a89904071cfa802fdcee1"},{"type":"WEB","url":"https://git.kernel.org/stable/c/6bea85979d05470e6416a2bb504a9bcd9178304c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/6e621dd99c57db916842865debaa65f20bbd6d8e"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38662.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38662"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"402bbb13a195caa83b3279ebecdabfb11ddee084"},{"fixed":"1dc0ed16cfbc3c28a07a89904071cfa802fdcee1"},{"fixed":"6e621dd99c57db916842865debaa65f20bbd6d8e"},{"fixed":"6bea85979d05470e6416a2bb504a9bcd9178304c"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38662.json"}}],"schema_version":"1.7.5"}