Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 power domain descriptors, too UAC3 power domain descriptors need to be verified with its variable bLength for avoiding the unexpected OOB accesses by malicious firmware, too.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
9a2fe9b801f585baccf8352d82839dcd54b300cf to < 1666207ba0a5973735ef010812536adde6174e81affected9a2fe9b801f585baccf8352d82839dcd54b300cf to < ebc9e06b6ea978a20abf9b87d41afc51b2d745acaffected9a2fe9b801f585baccf8352d82839dcd54b300cf to < f03418bb9d542f44df78eec2eff4ac83c0a8ac0daffected9a2fe9b801f585baccf8352d82839dcd54b300cf to < 40714daf4d0448e1692c78563faf0ed0f9d9b5c7affected9a2fe9b801f585baccf8352d82839dcd54b300cf to < 07c8d78dbb5e0ff8b23f7fd69cd1d4e2ba22b3dcaffected9a2fe9b801f585baccf8352d82839dcd54b300cf to < cd08d390d15b204cac1d3174f5f149a20c52e61aaffected9a2fe9b801f585baccf8352d82839dcd54b300cf to < 29b415ec09f5b9d1dfa2423b826725a8c8796b9aaffected9a2fe9b801f585baccf8352d82839dcd54b300cf to < 452ad54f432675982cc0d6eb6c40a6c86ac61dbdaffected9a2fe9b801f585baccf8352d82839dcd54b300cf to < d832ccbc301fbd9e5a1d691bdcf461cdb514595faffected
Linux Linux
Default version status: affected
4.17affected0 to < 4.17unaffected5.4.297 to ≤ 5.4.*unaffected5.10.241 to ≤ 5.10.*unaffected5.15.190 to ≤ 5.15.*unaffected6.1.149 to ≤ 6.1.*unaffected6.6.103 to ≤ 6.6.*unaffected6.12.43 to ≤ 6.12.*unaffected6.15.11 to ≤ 6.15.*unaffected6.16.2 to ≤ 6.16.*unaffected6.17 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/1666207ba0a5973735ef010812536adde6174e81 ↗
- https://git.kernel.org/stable/c/ebc9e06b6ea978a20abf9b87d41afc51b2d745ac ↗
- https://git.kernel.org/stable/c/f03418bb9d542f44df78eec2eff4ac83c0a8ac0d ↗
- https://git.kernel.org/stable/c/40714daf4d0448e1692c78563faf0ed0f9d9b5c7 ↗
- https://git.kernel.org/stable/c/07c8d78dbb5e0ff8b23f7fd69cd1d4e2ba22b3dc ↗
- https://git.kernel.org/stable/c/cd08d390d15b204cac1d3174f5f149a20c52e61a ↗
- https://git.kernel.org/stable/c/29b415ec09f5b9d1dfa2423b826725a8c8796b9a ↗
- https://git.kernel.org/stable/c/452ad54f432675982cc0d6eb6c40a6c86ac61dbd ↗
- https://git.kernel.org/stable/c/d832ccbc301fbd9e5a1d691bdcf461cdb514595f ↗
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html ↗
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-032379.html ↗