The Linux kernel ALSA virtio sound driver trusted control metadata (control type and value count) provided by the device without sufficient validation. This metadata was used directly to index internal arrays and to size loops and memory operations, leading to potential out-of-bounds access if the device supplied invalid values. The fix involved validating the control type and count early in the processing function virtsnd_kctl_parse_cfg() to prevent invalid indexing and memory operations.

A malicious or buggy virtio sound device could exploit this vulnerability to cause out-of-bounds memory access in the kernel, potentially leading to kernel crashes or memory corruption. No specific exploit in the wild is known at this time.

A fix has been implemented in the Linux kernel to validate control metadata from virtio sound devices before use. Users should apply the official kernel updates that include this fix. Since this is a kernel-level vulnerability, updating to a patched kernel version is the recommended mitigation.