The vulnerability in the Linux kernel's ASoC SOF ipc3-control subsystem occurred because snd_sof_update_control() validated the firmware-provided cdata->num_elems against local_cdata->data->size but did not verify it against the actual allocation size. If local_cdata->data->size was previously set inconsistently, this could cause memcpy to write past the allocated buffer, leading to potential memory corruption. The patch added a bounds check to ensure that num_elems fits within the ipc_control_data allocation before performing the copy operation.

This vulnerability could allow a specially crafted firmware to trigger a buffer overflow via the snd_sof_update_control() function, potentially causing memory corruption within the kernel. This could lead to system instability or other unintended behavior. There is no indication of known exploits in the wild.

A fix has been applied to the Linux kernel to add the necessary bounds check in snd_sof_update_control(). Users should update to the latest kernel versions that include this patch. Since this is a kernel-level vulnerability, applying the official kernel update is the recommended remediation. Patch status is not explicitly confirmed in the provided data; users should consult their Linux distribution or kernel vendor advisories for the exact fixed versions and update accordingly.