CVE-2025-38662

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: mediatek: mt8365-dai-i2s: pass correct size to mt8365_dai_set_priv

Given mt8365_dai_set_priv allocate priv_size space to copy priv_data which

means we should pass mt8365_i2s_priv[i] or "struct mtk_afe_i2s_priv"

instead of afe_priv which has the size of "struct mt8365_afe_private".

Otherwise the KASAN complains about.

[ 59.389765] BUG: KASAN: global-out-of-bounds in mt8365_dai_set_priv+0xc8/0x168 [snd_soc_mt8365_pcm]

...

[ 59.394789] Call trace:

[ 59.395167] dump_backtrace+0xa0/0x128

[ 59.395733] show_stack+0x20/0x38

[ 59.396238] dump_stack_lvl+0xe8/0x148

[ 59.396806] print_report+0x37c/0x5e0

[ 59.397358] kasan_report+0xac/0xf8

[ 59.397885] kasan_check_range+0xe8/0x190

[ 59.398485] asan_memcpy+0x3c/0x98

[ 59.399022] mt8365_dai_set_priv+0xc8/0x168 [snd_soc_mt8365_pcm]

[ 59.399928] mt8365_dai_i2s_register+0x1e8/0x2b0 [snd_soc_mt8365_pcm]

[ 59.400893] mt8365_afe_pcm_dev_probe+0x4

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References