Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-27436

ALSA: usb-audio: Stop parsing channels bits when all channels are found.

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Stop parsing channels bits when all channels are found. If a usb audio device sets more bits than the amount of channels it could write outside of the map array.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 04324ccc75f96b3ed7aad1c866d1b7925e977bdf to < 7e2c1b0f6dd9abde9e60f0f9730026714468770faffected
  • 04324ccc75f96b3ed7aad1c866d1b7925e977bdf to < 6d5dc96b154be371df0d62ecb07efe400701ed8aaffected
  • 04324ccc75f96b3ed7aad1c866d1b7925e977bdf to < 5cd466673b34bac369334f66cbe14bb77b7d7827affected
  • 04324ccc75f96b3ed7aad1c866d1b7925e977bdf to < 9af1658ba293458ca6a13f70637b9654fa4be064affected
  • 04324ccc75f96b3ed7aad1c866d1b7925e977bdf to < 629af0d5fe94a35f498ba2c3f19bd78bfa591be6affected
  • 04324ccc75f96b3ed7aad1c866d1b7925e977bdf to < 22cad1b841a63635a38273b799b4791f202ade72affected
  • 04324ccc75f96b3ed7aad1c866d1b7925e977bdf to < c8a24fd281dcdf3c926413dafbafcf35cde517a9affected
  • 04324ccc75f96b3ed7aad1c866d1b7925e977bdf to < 6d88b289fb0a8d055cb79d1c46a56aba7809d96daffected
  • 04324ccc75f96b3ed7aad1c866d1b7925e977bdf to < a39d51ff1f52cd0b6fe7d379ac93bd8b4237d1b7affected

Linux Linux

Default version status: affected

  • 3.8affected
  • 0 to < 3.8unaffected
  • 4.19.311 to ≤ 4.19.*unaffected
  • 5.4.273 to ≤ 5.4.*unaffected
  • 5.10.214 to ≤ 5.10.*unaffected
  • 5.15.153 to ≤ 5.15.*unaffected
  • 6.1.83 to ≤ 6.1.*unaffected
  • 6.6.23 to ≤ 6.6.*unaffected
  • 6.7.11 to ≤ 6.7.*unaffected
  • 6.8.2 to ≤ 6.8.*unaffected
  • 6.9 to ≤ *unaffected

References