Re: [PATCH] staging: greybus: audio_codec: fix stack overflow in stream name parsing

From: Greg KH

Date: Thu Oct 01 2026 - 01:33:29 EST


On Tue, Sep 01, 2026 at 01:56:00PM -0500, Yudi Yang wrote:
> intf_name and dir are 32-byte buffers. Parsing a module-provided AIF
> stream name with unbounded %s conversions can cause buffer-overwrites.
> Limit each conversion to 31 characters.

How was this issue found?

thanks,

greg k-h