On Sun, May 10, 2026 at 01:51:54AM +0800, 杨弋 wrote: > The acoustic_ctl_write debugfs handler allocates a buffer via  > memdup_user(from, count) but only validates that count is not too  > large. It then accesses src[0] through src[6] without ensuring > count >= 7. > > Add a minimum-size check of 7 bytes. > > Signed-off-by: Yi Yang > Assisted-by: kimi-cli:kimi-k2.6 You haven't provided a good signoff here, the name and email you're using here don't obviously correspond to those used in the email body. Please see Documentation/process/submitting-patches.rst for details on what this is and why it's important.