Kernel memory over-read via oversized private-data copy

An out-of-bounds read in the Linux kernel's MediaTek MT8365 ASoC driver allows local users to trigger an invalid read during probing. The mt8365_dai_i2s_register function passes the size of struct mt8365_afe_private to mt8365_dai_set_priv while copying the smaller struct mtk_afe_i2s_priv, causing memcpy to read beyond the global source object. Reaching the probe path through driver rebinding requires root privileges; published evidence demonstrates a KASAN-detected memory access rather than a practical privilege gain.