Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 cluster segment descriptors UAC3 class segment descriptors need to be verified whether their sizes match with the declared lengths and whether they fit with the allocated buffer sizes, too. Otherwise malicious firmware may lead to the unexpected OOB accesses.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
11785ef53228d23ec386f5fe4a34601536f0c891 to < 799c06ad4c9c790c265e8b6b94947213f1fb389caffected11785ef53228d23ec386f5fe4a34601536f0c891 to < 786571b10b1ae6d90e1242848ce78ee7e1d493c4affected11785ef53228d23ec386f5fe4a34601536f0c891 to < 275e37532e8ebe25e8a4069b2d9f955bfd202a46affected11785ef53228d23ec386f5fe4a34601536f0c891 to < 47ab3d820cb0a502bd0074f83bb3cf7ab5d79902affected11785ef53228d23ec386f5fe4a34601536f0c891 to < 1034719fdefd26caeec0a44a868bb5a412c2c1a5affected11785ef53228d23ec386f5fe4a34601536f0c891 to < ae17b3b5e753efc239421d186cd1ff06e5ac296eaffected11785ef53228d23ec386f5fe4a34601536f0c891 to < dfdcbcde5c20df878178245d4449feada7d5b201affected11785ef53228d23ec386f5fe4a34601536f0c891 to < 7ef3fd250f84494fb2f7871f357808edaa1fc6ceaffected11785ef53228d23ec386f5fe4a34601536f0c891 to < ecfd41166b72b67d3bdeb88d224ff445f6163869affected
Linux Linux
Default version status: affected
4.19affected0 to < 4.19unaffected5.4.297 to ≤ 5.4.*unaffected5.10.241 to ≤ 5.10.*unaffected5.15.190 to ≤ 5.15.*unaffected6.1.149 to ≤ 6.1.*unaffected6.6.103 to ≤ 6.6.*unaffected6.12.43 to ≤ 6.12.*unaffected6.15.11 to ≤ 6.15.*unaffected6.16.2 to ≤ 6.16.*unaffected6.17 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/799c06ad4c9c790c265e8b6b94947213f1fb389c ↗
- https://git.kernel.org/stable/c/786571b10b1ae6d90e1242848ce78ee7e1d493c4 ↗
- https://git.kernel.org/stable/c/275e37532e8ebe25e8a4069b2d9f955bfd202a46 ↗
- https://git.kernel.org/stable/c/47ab3d820cb0a502bd0074f83bb3cf7ab5d79902 ↗
- https://git.kernel.org/stable/c/1034719fdefd26caeec0a44a868bb5a412c2c1a5 ↗
- https://git.kernel.org/stable/c/ae17b3b5e753efc239421d186cd1ff06e5ac296e ↗
- https://git.kernel.org/stable/c/dfdcbcde5c20df878178245d4449feada7d5b201 ↗
- https://git.kernel.org/stable/c/7ef3fd250f84494fb2f7871f357808edaa1fc6ce ↗
- https://git.kernel.org/stable/c/ecfd41166b72b67d3bdeb88d224ff445f6163869 ↗
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html ↗
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-032379.html ↗