In validateclockselector of clock.c, there is a possible out of bounds read due to memory corruption. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{ "vanir_signatures": [ { "digest": { "length": 147.0, "function_hash": "205785718781910012398978548638517445518" }, "id": "ASB-A-382239029-49f2f1cd", "source": "https://android.googlesource.com/kernel/common/+/f9aca4186aa3e257d966fd5b2e5a4557394358e7", "deprecated": false, "signature_version": "v1", "target": { "file": "sound/usb/clock.c", "function": "validate_clock_selector" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "265400977830982444295918294344149627393", "171085873840617657274733885613391206196", "82997789143412418524293536495802543461", "125812141739208913212144361011428449281", "53534113893816824882743326171284255687", "31223010587888343773372201349606036635", "109183856859433338318935067452231071640", "93240069133706551160883144084831253247", "24637483293542169037362240142467062455", "42310106538543845895214824549317468123", "70372097107003232583350646205985042588", "44848510674293726028304985816668968447", "331833405989284484880620199056643806100", "235371844192433601046661857425643057091" ] }, "id": "ASB-A-382239029-5067160a", "source": "https://android.googlesource.com/kernel/common/+/f9aca4186aa3e257d966fd5b2e5a4557394358e7", "deprecated": false, "signature_version": "v1", "target": { "file": "sound/usb/clock.c" }, "signature_type": "Line" }, { "digest": { "length": 147.0, "function_hash": "205785718781910012398978548638517445518" }, "id": "ASB-A-382239029-6141bfab", "source": "https://android.googlesource.com/kernel/common/+/f9aca4186aa3e257d966fd5b2e5a4557394358e7", "deprecated": false, "signature_version": "v1", "target": { "file": "sound/usb/clock.c", "function": "validate_clock_source" }, "signature_type": "Function" }, { "digest": { "length": 147.0, "function_hash": "205785718781910012398978548638517445518" }, "id": "ASB-A-382239029-65565b6c", "source": "https://android.googlesource.com/kernel/common/+/d0e1b23b5d6aeac552a7b1f3721c0a377b8f54cb", "deprecated": false, "signature_version": "v1", "target": { "file": "sound/usb/clock.c", "function": "validate_clock_source" }, "signature_type": "Function" }, { "digest": { "threshold": 0.9, "line_hashes": [ "265400977830982444295918294344149627393", "171085873840617657274733885613391206196", "82997789143412418524293536495802543461", "125812141739208913212144361011428449281", "53534113893816824882743326171284255687", "31223010587888343773372201349606036635", "109183856859433338318935067452231071640", "93240069133706551160883144084831253247", "24637483293542169037362240142467062455", "42310106538543845895214824549317468123", "70372097107003232583350646205985042588", "44848510674293726028304985816668968447", "331833405989284484880620199056643806100", "235371844192433601046661857425643057091" ] }, "id": "ASB-A-382239029-81c6090a", "source": "https://android.googlesource.com/kernel/common/+/d0e1b23b5d6aeac552a7b1f3721c0a377b8f54cb", "deprecated": false, "signature_version": "v1", "target": { "file": "sound/usb/clock.c" }, "signature_type": "Line" }, { "digest": { "length": 147.0, "function_hash": "205785718781910012398978548638517445518" }, "id": "ASB-A-382239029-83243862", "source": "https://android.googlesource.com/kernel/common/+/f9aca4186aa3e257d966fd5b2e5a4557394358e7", "deprecated": false, "signature_version": "v1", "target": { "file": "sound/usb/clock.c", "function": "validate_clock_multiplier" }, "signature_type": "Function" }, { "digest": { "length": 147.0, "function_hash": "205785718781910012398978548638517445518" }, "id": "ASB-A-382239029-d04edb61", "source": "https://android.googlesource.com/kernel/common/+/d0e1b23b5d6aeac552a7b1f3721c0a377b8f54cb", "deprecated": false, "signature_version": "v1", "target": { "file": "sound/usb/clock.c", "function": "validate_clock_multiplier" }, "signature_type": "Function" }, { "digest": { "length": 147.0, "function_hash": "205785718781910012398978548638517445518" }, "id": "ASB-A-382239029-f957be52", "source": "https://android.googlesource.com/kernel/common/+/d0e1b23b5d6aeac552a7b1f3721c0a377b8f54cb", "deprecated": false, "signature_version": "v1", "target": { "file": "sound/usb/clock.c", "function": "validate_clock_selector" }, "signature_type": "Function" } ], "fixes": [ "https://android.googlesource.com/kernel/common/+/f9aca4186aa3e257d966fd5b2e5a4557394358e7", "https://android.googlesource.com/kernel/common/+/d0e1b23b5d6aeac552a7b1f3721c0a377b8f54cb" ], "spl": "2025-04-05", "severity": "High", "types": [ "ID" ] }