Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-38629

ALSA: usb: scarlett2: Fix missing NULL check

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: scarlett2: Fix missing NULL check scarlett2_input_select_ctl_info() sets up the string arrays allocated via kasprintf(), but it misses NULL checks, which may lead to NULL dereference Oops. Let's add the proper NULL check.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 8eba063b5b2b498ddd01ea6f29fc9b12368c3d53 to < d558db85920b124bac36f8a7ddc5de0aa7491bddaffected
  • 8eba063b5b2b498ddd01ea6f29fc9b12368c3d53 to < 2c735fcaee81ad8056960659dc9dc460891e76b0affected
  • 8eba063b5b2b498ddd01ea6f29fc9b12368c3d53 to < df485a4b2b3ee5b35c80f990beb554e38a8a5fb1affected

Linux Linux

Default version status: affected

  • 6.13affected
  • 0 to < 6.13unaffected
  • 6.15.10 to ≤ 6.15.*unaffected
  • 6.16.1 to ≤ 6.16.*unaffected
  • 6.17 to ≤ *unaffected

References