Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential memory leaks When the driver hits -ENOMEM at allocating a URB or a buffer, it aborts and goes to the error path that releases the all previously allocated resources. However, when -ENOMEM hits at the middle of the sync EP URB allocation loop, the partially allocated URBs might be left without released, because ep->nurbs is still zero at that point. Fix it by setting ep->nurbs at first, so that the error handler loops over the full URB list.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
8fdff6a319e7dac757c558bd283dc4577e68cde7 to < 0604e5e5537af099ea2f6dfd892afe5c92db8a80affected8fdff6a319e7dac757c558bd283dc4577e68cde7 to < 28d8d267af5d73f91d7640cbdb4024703256e36caffected8fdff6a319e7dac757c558bd283dc4577e68cde7 to < 46f0aed47673e275d682af60ed26dcc28add8eaeaffected8fdff6a319e7dac757c558bd283dc4577e68cde7 to < 988ec0cd0a2643c25c1658f7c33de2e15a5a2e31affected8fdff6a319e7dac757c558bd283dc4577e68cde7 to < bc1d16d282bca421c6fc31de4b8fd412010f01bdaffected8fdff6a319e7dac757c558bd283dc4577e68cde7 to < 0672215994e2347a9b4f145e2bc1709b1e01cee3affected8fdff6a319e7dac757c558bd283dc4577e68cde7 to < faa8c1ed77d0169955b9b3516b714cc5fb512f27affected8fdff6a319e7dac757c558bd283dc4577e68cde7 to < e4442410f76d66b9f7e854010bce04853f665324affected8fdff6a319e7dac757c558bd283dc4577e68cde7 to < 6382da0828995af87aa8b8bef28cc61aceb4aff3affected
Linux Linux
Default version status: affected
3.5affected0 to < 3.5unaffected4.9.331 to ≤ 4.9.*unaffected4.14.296 to ≤ 4.14.*unaffected4.19.262 to ≤ 4.19.*unaffected5.4.220 to ≤ 5.4.*unaffected5.10.150 to ≤ 5.10.*unaffected5.15.75 to ≤ 5.15.*unaffected5.19.17 to ≤ 5.19.*unaffected6.0.3 to ≤ 6.0.*unaffected6.1 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/0604e5e5537af099ea2f6dfd892afe5c92db8a80 ↗
- https://git.kernel.org/stable/c/28d8d267af5d73f91d7640cbdb4024703256e36c ↗
- https://git.kernel.org/stable/c/46f0aed47673e275d682af60ed26dcc28add8eae ↗
- https://git.kernel.org/stable/c/988ec0cd0a2643c25c1658f7c33de2e15a5a2e31 ↗
- https://git.kernel.org/stable/c/bc1d16d282bca421c6fc31de4b8fd412010f01bd ↗
- https://git.kernel.org/stable/c/0672215994e2347a9b4f145e2bc1709b1e01cee3 ↗
- https://git.kernel.org/stable/c/faa8c1ed77d0169955b9b3516b714cc5fb512f27 ↗
- https://git.kernel.org/stable/c/e4442410f76d66b9f7e854010bce04853f665324 ↗
- https://git.kernel.org/stable/c/6382da0828995af87aa8b8bef28cc61aceb4aff3 ↗