In the Linux kernel, the following vulnerability has been resolved:ASoC: SOF: Add some bounds checking to firmware dataSmatch complains about "head->full_size - head->header_size" canunderflow.  To some extent, we're always going to have to trust thefirmware a bit.  However, it's easy enough to add a check for negatives,and let's add a upper bounds check as well.
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')