Re: staging: greybus: audio: possible out of bounds read in the topology parser

From: Greg Kroah-Hartman

Date: Fri Jun 19 2026 - 00:38:49 EST


On Fri, Jun 19, 2026 at 10:36:10AM +0800, Maoyi Xie wrote:
> Hi all,
>
> I think the Greybus audio topology parser in
> drivers/staging/greybus/audio_topology.c can read past the topology blob
> when a module reports inconsistent counts.

The kernel trusts the hardware, and the drivers have never been reviewed
or audited for if the hardware does not report the correct data. I'm
sure there are lots of code paths that are buggy if the hardware starts
to do odd things. If this is a threat model you worry about, and wish
to address, wonderful, there should be lots of code to change :)

But for now, Linux assumes that the hardware is trustworthy once a
driver is bound to a device.

thanks,

greg k-h