ASoC: ops: Consistently treat platform_max as control value 漏洞信息(CVE-2025-37889)

一、漏洞 CVE-2025-37889 基础信息

漏洞信息

                                        # PCI/MSI：正确处理所有 PCI/MSI 后端的 NOMARK 标志

## 漏洞概述
在Linux内核中，PCI/MSI处理NOMASK标志时存在一个漏洞，该漏洞导致在特定条件下发生NULL指针解引用。

## 影响版本
未提供具体影响的Linux内核版本，但此漏洞存在于处理PCI/MSI后端的内核版本中。

## 漏洞细节
在将XEN特定的全局变量`pci_msi_ignore_mask`转换为MSI域标志时，忽略了以下事实：

- **1.** 遗留架构不提供中断域。
- **2.** 父MSI域不一定附带有域信息。

这两种情况会导致无条件的NULL指针解引用。

## 漏洞影响
该漏洞可能在处理PCI/MSI消息时导致系统崩溃或其他不稳定行为。修复此问题的方法是使用现有的`pci_msi_domain_supports()`辅助函数，该函数正确处理所有可能的情况。

提示

尽管我们采用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。
神龙会尽力确保数据准确，但也请结合实际情况进行甄别与判断。
神龙祝您一切顺利！

漏洞标题

ASoC: ops: Consistently treat platform_max as control value

来源：美国国家漏洞数据库 NVD

漏洞描述信息

In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Consistently treat platform_max as control value This reverts commit 9bdd10d57a88 ("ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min"), and makes some additional related updates. There are two ways the platform_max could be interpreted; the maximum register value, or the maximum value the control can be set to. The patch moved from treating the value as a control value to a register one. When the patch was applied it was technically correct as snd_soc_limit_volume() also used the register interpretation. However, even then most of the other usages treated platform_max as a control value, and snd_soc_limit_volume() has since been updated to also do so in commit fb9ad24485087 ("ASoC: ops: add correct range check for limiting volume"). That patch however, missed updating snd_soc_put_volsw() back to the control interpretation, and fixing snd_soc_info_volsw_range(). The control interpretation makes more sense as limiting is typically done from the machine driver, so it is appropriate to use the customer facing representation rather than the internal codec representation. Update all the code to consistently use this interpretation of platform_max. Finally, also add some comments to the soc_mixer_control struct to hopefully avoid further patches switching between the two approaches.

来源：美国国家漏洞数据库 NVD