ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 4.19.311, 5.4.273, 5.10.214, 5.15.153, 6.1.83, and 3 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Stop parsing channels bits when all channels are found. If a usb audio device sets more bits than the amount of channels it could write outside of the map array.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
From 04324ccc75f96b3ed7aad1c866d1b7925e977bdf · fixed in 7e2c1b0f6dd9abde9e60f0f9730026714468770f; From 04324ccc75f96b3ed7aad1c866d1b7925e977bdf · fixed in 6d5dc96b154be371df0d62ecb07efe400701ed8a; From 04324ccc75f96b3ed7aad1c866d1b7925e977bdf · fixed in 5cd466673b34bac369334f66cbe14bb77b7d7827; From 04324ccc75f96b3ed7aad1c866d1b7925e977bdf · fixed in 9af1658ba293458ca6a13f70637b9654fa4be064; From 04324ccc75f96b3ed7aad1c866d1b7925e977bdf · fixed in 629af0d5fe94a35f498ba2c3f19bd78bfa591be6; From 04324ccc75f96b3ed7aad1c866d1b7925e977bdf · fixed in 22cad1b841a63635a38273b799b4791f202ade72; From 04324ccc75f96b3ed7aad1c866d1b7925e977bdf · fixed in c8a24fd281dcdf3c926413dafbafcf35cde517a9; From 04324ccc75f96b3ed7aad1c866d1b7925e977bdf · fixed in 6d88b289fb0a8d055cb79d1c46a56aba7809d96d; From 04324ccc75f96b3ed7aad1c866d1b7925e977bdf · fixed in a39d51ff1f52cd0b6fe7d379ac93bd8b4237d1b7
- Linux Linux
3.8
- KernelLinux
From 3.8.0 · fixed in 4.19.311; From 4.20.0 · fixed in 5.4.273; From 5.5.0 · fixed in 5.10.214; From 5.11.0 · fixed in 5.15.153; From 5.16.0 · fixed in 6.1.83; From 6.2.0 · fixed in 6.6.23; From 6.7.0 · fixed in 6.7.11; From 6.8.0 · fixed in 6.8.2
References 9
git.kernel.org
- stable/c/7e2c1b0f6dd9abde9e60f0f9730026714468770f
- stable/c/6d5dc96b154be371df0d62ecb07efe400701ed8a
- stable/c/5cd466673b34bac369334f66cbe14bb77b7d7827
- stable/c/9af1658ba293458ca6a13f70637b9654fa4be064
- stable/c/629af0d5fe94a35f498ba2c3f19bd78bfa591be6
- stable/c/22cad1b841a63635a38273b799b4791f202ade72
- stable/c/c8a24fd281dcdf3c926413dafbafcf35cde517a9
- stable/c/6d88b289fb0a8d055cb79d1c46a56aba7809d96d
- stable/c/a39d51ff1f52cd0b6fe7d379ac93bd8b4237d1b7