Re: [PATCH] staging: greybus: audio_codec: fix stack overflow in stream name parsing

From: Greg KH

Date: Wed Sep 02 2026 - 01:55:43 EST


On Tue, Sep 01, 2026 at 01:56:00PM -0500, Yudi Yang wrote:
> intf_name and dir are 32-byte buffers. Parsing a module-provided AIF
> stream name with unbounded %s conversions can cause buffer-overwrites.
> Limit each conversion to 31 characters.
>
> Fixes: 60e7327d54b2 ("greybus: audio: Find data connection based on id")
> Cc: stable@xxxxxxxxxxxxxxx
> Signed-off-by: Yudi Yang <2000jedi@xxxxxxxxx>
> ---
> drivers/staging/greybus/audio_codec.c | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)

How was this found and tested?

thanks,

greg k-h